Anthropic published a blog post claiming RCE with it [0].

[0]: https://www.anthropic.com/research/discovering-vulnerabiliti...

For some reason the submission I saw here last week (not the same article, and I'm struggling to find now) was flagged to death before getting as popular as this one.