CVE-2026-42074 Details
Description
OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM (an untrusted principal per the project's own threat model) can set it to true in any tool_use response. Combined with the default allowUnsandboxedCommands: true setting, a prompt-injected model can escape the sandbox for any arbitrary command, achieving full host-level code execution. This issue has been patched in version 0.5.1.
A critical vulnerability has been identified in OpenClaude, an open-source command line interface for coding agents, prior to version 0.5.1. The issue arises from the 'dangerouslyDisableSandbox' parameter being exposed in the BashTool input schema. This exposure allows the language model (an untrusted entity according to the project's threat model) to set the parameter to true in any tool use response. When combined with the default 'allowUnsandboxedCommands' setting of true, a prompt-injected model can escape the sandbox and execute arbitrary commands on the host, leading to full code execution. This vulnerability has been patched in version 0.5.1.
Users can update to OpenClaude version 0.5.1 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m77w-p5jj-xmhg | CISA-ADP | ExploitVendor Advisory |
| https://github.com/Gitlawb/openclaude/commit/aab489055c53dd64369414116fe93226d2656273 | [email protected] | Patch |
| https://github.com/Gitlawb/openclaude/pull/778 | [email protected] | Issue TrackingPatch |
| https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m77w-p5jj-xmhg | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-284 | Improper Access Control | [email protected] |
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| gitlawb openclaude | < 0.5.1 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 3, 2026 | Initial Analysis | [email protected] |
| Jun 2, 2026 | CVE Modified | CISA-ADP |
| Jun 2, 2026 | New CVE Received | [email protected] |