PT-2026-30381 · Unknown · Openclaude

Published 2026-04-04 · Updated 2026-04-21 · CVE-2026-35570

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenClaude versions prior to 0.5.1

Description A logic flaw exists in the bashToolHasPermission() function within the src/tools/BashTool/bashPermissions.ts file. When the sandbox auto-allow feature is active and no explicit deny rule is configured, the function returns an allow result immediately. This occurs before the checkPathConstraints filter is evaluated, allowing commands containing path traversal sequences, such as '../../../../../etc/passwd', to bypass directory restrictions. This can lead to the reading or writing of arbitrary files outside the sandbox boundary, defeating filesystem isolation.

Recommendations Update to version 0.5.1. As a temporary workaround, restrict the use of the bashToolHasPermission() function or disable the sandbox auto-allow feature until the update is applied.

Exploit

Fix

Improper Access Control

Path traversal

Weakness Enumeration

CWE-284

CWE-22

Related Identifiers

CVE-2026-35570

GHSA-M6RX-7PVW-2F73

Affected Products

Openclaude

References · 7

• 🔥 https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m6rx-7pvw-2f73 · Exploit
• https://github.com/Gitlawb/openclaude/commit/7002cb302b78ea2a19da3f26226de24e2903fa1d · Patch
• https://osv.dev/vulnerability/GHSA-m6rx-7pvw-2f73 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35570 · Security Note
• https://github.com/Gitlawb/openclaude · Note
• https://twitter.com/CVEnew/status/2046571869097316731 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2040406897778409917 · Twitter Post