Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in `bashToolHasPermission()` inside `src/tools/BashTool/bashPermissions.ts`. When the sandbox auto-allow feature is active and no explicit deny rule is configured, the function returns an `allow` result immediately — before the path constraint filter (`checkPathConstraints`) is ever evaluated. This allows commands containing path traversal sequences (e.g., `../../../../../etc/passwd`) to bypass directory restrictions entirely. Version 0.5.1 contains a patch for the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-04 | 1 | General1 |
| 2026-04-21 | 1 | Disclosure1 |
CVE-2026-35570 OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in `bashToolHasPermiss… https://www.cve.org/CVERecord?id=CVE-2026-35570
Post summary
CVE-2026-35570 highlights a logic flaw in OpenClaude's bashToolHasPermiss functionality for versions before 0.5.1, with no PoC, exploit, or patch details disclosed.
CVE-2026-35570 Breaking Out of the Sandbox https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35570
Post summary
The post only cites the CVE identifier and a link to a vulnerability database; no substantive details or evidence of exploitation, patches, or technical data are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gitlawb | openclaude | - | - | - |