Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files