Claroty reported that Claude Sonnet 4.6 reproduced previously disclosed vulnerabilities in a Danfoss AK-SM 800A refrigeration controller during a researcher-guided lab exercise. The work took about 28 minutes from initial analysis to a working exploit, according to Claroty Team82’s October 13, 2026 report. In a separate account of attacks on French supermarket refrigeration systems, Claroty said the intruders’ route had not been established.

What Claroty’s 28-minute test involved

Claroty ran Claude Sonnet 4.6 in medium reasoning mode through Cursor, an AI coding editor. The test target was a Danfoss AK-SM 800A controller in a laboratory. The starting materials included public vulnerability information, firmware downloaded from Danfoss’s website and analysis tools.

Claroty estimated the AI usage for the exercise at about $6. That figure describes AI usage, not the entire cost of the experiment.

Researchers guided the work

Claude initially reproduced two of the three known vulnerabilities, but its analysis of an authentication bypass went off track. Researchers redirected the work and supplied a Ghidra integration, a tool for analyzing software, to examine the controller’s 67 MB application binary. With that help, Claude reproduced the bypass and chained it with command injection to demonstrate root-level command execution on the lab device.

The result was a researcher-guided reproduction of known flaws. It was not a discovery of new vulnerabilities. NeoTeo has also covered Anthropic’s account of Claude’s use in China-linked military and surveillance operations; Claroty’s report describes a separate exercise focused on a refrigeration controller.

The Danfoss flaws and the stated fix

In technical research published August 9, 2026, Claroty described three vulnerabilities in the AK-SM 800A:

  • CVE-2025-41450: an authentication bypass.
  • CVE-2025-41451: command injection.
  • CVE-2025-41452: Nginx configuration injection.

Claroty says Danfoss firmware R4.3.1 addresses the vulnerabilities covered in that research. Its recommendations include upgrading and keeping management interfaces off the open internet, with administrative access restricted to trusted networks or protected by a VPN. Claroty’s technical research describes the flaws and remediation.

The link to the French supermarket attacks

Claroty’s October 12, 2026 account of attacks on French supermarket refrigeration systems said the actual route used by the intruders had not been established. The lab exercise reproduced previously disclosed AK-SM 800A vulnerabilities; it did not identify the route used in those attacks. Claroty’s incident account treats that route as unconfirmed. Separately, La Tribune reported that more than 400 French supermarkets were affected.