GoKawiilUnpatched flaw in Anthropic Claude's document skills lets attackers run code on Linux
AIR Security researchers found a vulnerability, dubbed 'Office Party,' in Claude's official DOCX, PPTX, and XLSX skills, which rely on a helper script that launches LibreOffice via a shared library loaded through Linux's LD_PRELOAD mechanism. Because the script doesn't verify the origin of an existing shared-temp-folder library file, an attacker who plants a malicious file there can get it executed with the privileges of the user running Claude the next time a document is processed. Anthropic has declined to fix the issue.