CVE-2026-35570 | Gitlawb openclaude up to 0.5.0 Command Line Interface Parser bashPermissions.ts path traversal (GHSA-m6rx-7pvw-2f73)

April 21, 2026 Yanac

A vulnerability identified as critical has been detected in Gitlawb openclaude up to 0.5.0. This issue affects some unknown processing of the file src/tools/BashTool/bashPermissions.ts of the component Command Line Interface Parser. Performing a manipulation results in path traversal.

This vulnerability is known as CVE-2026-35570. Attacking locally is a requirement. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More