CVE-2026-35570 - Vulnerability Analysis

Overview

OpenClaude < 0.5.1 contains a broken access control caused by a logic flaw in bashToolHasPermission() allowing path traversal sequences to bypass directory restrictions, letting attackers execute commands outside allowed paths, exploit requires sandbox auto-allow enabled with no explicit deny rules.

Severity & Score

Impact

Attackers can bypass directory restrictions to execute commands accessing unauthorized file paths, potentially leading to data exposure or system compromise.

Mitigation

Update to version 0.5.1 or later.

References

• https://github.com/Gitlawb/openclaude/commit/7002cb302b78ea2a19da3f26226de24e2903fa1d
• https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m6rx-7pvw-2f73

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner