CVE-2026-35570

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in `bashToolHasPermission()` inside `src/tools/BashTool/bashPermissions.ts`. When the sandbox auto-allow feature is active and no explicit deny rule is configured, the function returns an `allow` result immediately — before the path constraint filter (`checkPathConstraints`) is ever evaluated. This allows commands containing path traversal sequences (e.g., `../../../../../etc/passwd`) to bypass directory restrictions entirely. Version 0.5.1 contains a patch for the issue.

• CWE-22
• CWE-284

• https://github.com/Gitlawb/openclaude/commit/7002cb302b78ea2a19da3f26226de24e2903fa1dPatch
• https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m6rx-7pvw-2f73Exploit, Mitigation, Vendor Advisory
• https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m6rx-7pvw-2f73Exploit, Mitigation, Vendor Advisory

Published

Apr 21, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-35565Stored Cross-Site Scripting (XSS) via Unsanitized Topology M…5.4
• CVE-2026-35566Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-35567Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-35568MCP Java SDK is the official Java SDK for Model Context Prot…5.7
• CVE-2026-35569ApostropheCMS is an open-source Node.js content management s…8.7
• CVE-2026-3557Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing H…8
• CVE-2026-35571Emissary is a P2P based data-driven workflow engine. Prior t…4.8
• CVE-2026-35572ChurchCRM is an open-source church management system. Prior …6
• CVE-2026-35573ChurchCRM is an open-source church management system. Prior …9.1
• CVE-2026-35574ChurchCRM is an open-source church management system. Prior …8.7
• CVE-2026-35575ChurchCRM is an open-source church management system. Prior …8
• CVE-2026-35576ChurchCRM is an open-source church management system. Prior …8.7