An unreleased Anthropic Claude research model developed an exploit for CVE-2026-98432 that gains remote root access without credentials on Linux servers running a multipath TCP listener.