CVE-2026-39398
1 advisory.
npm/openclaw-claude-bridge CVE-2026-39398: medium
openclaw-claude-bridge: sandbox is not effective - `--allowed-tools ""` does not restrict available tools
Action: Upgrade openclaw-claude-bridge to 2.0.0 or later.
npm i openclaw-claude-bridge@2.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0 | - |
Fixed versions
| 2.0.0 |
Sources
- osv: GHSA-7853-gqqm-vcwx
- https://github.com/SeaL773/openclaw-claude-bridge/security/advisories/GHSA-7853-gqqm-vcwx
- https://github.com/SeaL773/openclaw-claude-bridge/commit/8a296f5
- https://github.com/SeaL773/openclaw-claude-bridge
- https://github.com/SeaL773/openclaw-claude-bridge/releases/tag/v1.1.1
CVE-2026-39398 · published · modified · JSON