npm/@gitlawb/openclaude CVE-2026-35570: high 8.4, EPSS 0.19%
OpenClaude: Sandbox Bypass via Early-Exit Logic Flaw Allows Path Traversal
Action: Upgrade @gitlawb/openclaude to 0.5.1 or later.
npm i @gitlawb/openclaude@0.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.1 | - |
Fixed versions
| 0.5.1 |
Sources
- osv: GHSA-m6rx-7pvw-2f73
- https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m6rx-7pvw-2f73
- https://nvd.nist.gov/vuln/detail/CVE-2026-35570
- https://github.com/Gitlawb/openclaude/commit/7002cb302b78ea2a19da3f26226de24e2903fa1d
- https://github.com/Gitlawb/openclaude
CVE-2026-35570 · published · modified · JSON