CVE-2026-35570: Improper Limitation of a Pathname to a Restricted Directory

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in bashToolHasPermission inside src/tools/BashTool/bashPermissions.ts. When the sandbox auto-allow feature is active and no explicit deny rule is...

OpenClaude security vulnerabilities

OpenClaude is an open-source coding assistant CLI developed by Gitlawb. Versions of OpenClaude prior to 0.5.1 contained security vulnerabilities. These vulnerabilities stemmed from logical flaws in the bashToolHasPermission function, which could allow for path traversal sequences to bypass...

CVE-2026-35570

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in "bashToolHasPermission" inside "src/tools/BashTool/bashPermissions.ts". When the sandbox auto-allow feature is active and no explicit deny rule is...