Anthropic develops exploit enabling remote root access on Linux MPTCP servers

First reported by The Hacker News at · Updated · 2 sources

The vulnerability allows attackers without credentials to execute commands with root privileges on servers running Multipath TCP listeners. According to The Hacker News, the flaw is tracked as CVE-2026-98432, affects Ubuntu and Red Hat Enterprise Linux among other distributions, and received a 9.8 out of 10 severity rating from the kernel’s CVE team.

  • According to The Hacker News, Anthropic said its AI model wrote the exploit.

Covered by 2 publishers within 29 hours of the first report.

Reporting2

The Hacker News Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions · info@thehackernews.com (The Hacker News)
BleepingComputer Critical Linux kernel flaw allows remote root attacks on MPTCP servers · Lawrence Abrams

Related

Cisco adds Anthropic’s Claude Mythos to AI Defense for red teaming
Hackers use fake OpenAI, SpaceX, and Anthropic event invites in new phishing scam to steal Microsoft and Google accounts
Yoba attackers use fake ChatGPT and Claude apps to install crypto miners
Anthropic’s Skills AI Workflow Standard Joins the Linux Foundation

Topics Anthropic