Skip to content
OpenAdvisories

Package · npm

openclaude

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2026-42074

    OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

    OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM (an untrusted principal per …

    Gitlawb openclaude openclaude npm