Anthropic Says an Unreleased Claude Model Built a Linux Root Exploit

Anthropic says an unreleased research model wrote a working exploit for a Linux kernel flaw that could let a remote attacker run commands as root on certain servers, without logging in or prompting a user. The company says the vulnerability, CVE-2026-98432, has been patched upstream and backported to maintained stable kernel branches.