Gitlawb openclaude up to 0.5.0 Setting dangerouslyDisableSandbox missing authentication

Summaryinfo

A vulnerability categorized as critical has been discovered in Gitlawb openclaude up to 0.5.0. The impacted element is an unknown function of the component Setting Handler. Such manipulation of the argument dangerouslyDisableSandbox leads to missing authentication. This vulnerability is uniquely identified as CVE-2026-42074. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Gitlawb openclaude up to 0.5.0. Affected by this issue is an unknown functionality of the component Setting Handler. The manipulation of the argument dangerouslyDisableSandbox with an unknown input leads to a missing authentication vulnerability. Using CWE to declare the problem leads to CWE-306. The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Impacted is confidentiality, integrity, and availability. CVE summarizes:

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM (an untrusted principal per the project's own threat model) can set it to true in any tool_use response. Combined with the default allowUnsandboxedCommands: true setting, a prompt-injected model can escape the sandbox for any arbitrary command, achieving full host-level code execution. This issue has been patched in version 0.5.1.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-42074 since 04/23/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available.

Upgrading to version 0.5.1 eliminates this vulnerability. Applying the patch aab489055c53dd64369414116fe93226d2656273 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Gitlawb

Name

• openclaude

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5.0

License

• open-source

Website

• Product: https://github.com/Gitlawb/openclaude/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion