CVE-2026-35570
Description
OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in `bashToolHasPermission()` inside `src/tools/BashTool/bashPermissions.ts`. When the sandbox auto-allow feature is active and no explicit deny rule is configured, the function returns an `allow` result immediately — before the path constraint filter (`checkPathConstraints`) is ever evaluated. This allows commands containing path traversal sequences (e.g., `../../../../../etc/passwd`) to bypass directory restrictions entirely. Version 0.5.1 contains a patch for the issue.
How to fix
- gitlawb openclaude0.5.1 or later
- @gitlawb/openclaude0.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gitlawb openclaude | v < 0.5.1 | 0.5.1 |
| @gitlawb/openclaudenpm | v < 0.5.1 | 0.5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.