ZeroDay Findings
Sign inSign up

Findings

CVE-2026-35570

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.

Published Apr 21, 2026 · updated Jun 17, 2026 · gitlawb openclaude

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in inside . When the sandbox auto-allow feature is active and no explicit deny rule is configured, the function returns an result immediately — before the path constraint filter ( ) is ever evaluated. This allows commands containing path traversal sequences (e.g., ) to bypass directory restrictions entirely. Version 0.5.1 contains a patch for the issue.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 21, 2026 · NIST NVD

    Detected

    OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in inside . When the sandbox auto-allow feature is active and no explicit deny rule is configured, the function returns an result immediately — before the path constraint filter ( ) is ever evaluated. This allows commands containing path traversal sequence

  2. Jun 17, 2026 · NIST NVD

    Updated

    OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in inside . When the sandbox auto-allow feature is active and no explicit deny rule is configured, the function returns an result immediately — before the path constraint filter ( ) is ever evaluated. This allows commands containing path traversal sequence

Affected

  • cpe gitlawb/openclaudeversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-35570

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-35570

    OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in inside . When the sandbox auto-allow feature is active and no explic

    nvd.nist.gov

References