Anthropic: Claude Writes Linux Exploit Capable of Remote Command Execution

On November 3, Anthropic disclosed that Claude generated a Linux kernel exploit following an initial prompt, which can send packets to servers with Multipath TCP listening enabled to execute commands with root privileges without credentials or user interaction.

The vulnerability is designated CVE-2026-98432. Anthropic stated that the upstream kernel has been patched and the fix has been backported to all maintained stable branches. According to Ubuntu's vulnerability tracking page, patches for versions 22.04, 24.04, 26.04, and 26.10 are still being rolled out.