Remix.run Logo
▲ throwawayffffas a day ago

> I read the whole post and still don’t have any idea what it is and how severe it is.

From the article the bits you need to know:

1. CVE-2026-98432 is a critical (CVSS 9.8) bug.

2. Anthropic says it built a working exploit that gets root on a server.

▲wredcoll a day ago | parent | next [-]

> 2. Anthropic says it built a working exploit that gets root on a server.

Is there any independent verification of this?

▲xbar a day ago | parent [-]

Normally what happens is that the vendors get a chance to evaluate the verification, but that in the public's interest the working exploits don't get distributed.

▲wolvesechoes 14 hours ago | parent [-]

Lot of words to say they can just sell bullshit.

▲paxy 19 hours ago | parent | prev | next [-]

> CVE-2026-98432 is a critical (CVSS 9.8) bug

That means nothing. A CVE's score is theoretical. It's up to every individual implementation to decide how it affects them.

▲dncornholio 12 hours ago | parent | prev [-]

Can we please stop giving value on what people / companies / LLMS say?

If there's no documented research or reproducible PoC, you can just ignore it.