Skip to content
OpenAdvisories

Vendor

Gitlawb

4 known vulnerabilities.

Products

openclaude 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-35570 Public exploit

    OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversal

    OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in `bashToolHasPermission()` inside `src/tools/BashTool/bashPermissions.ts`. When the sandbox auto-allow feature is…

    Gitlawb openclaude @gitlawb/openclaude npm