CVE-2026-42074

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-42074
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42074.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-42074
Aliases
Published
2026-06-02T15:38:24.753Z
Modified
2026-08-12T03:51:28.771785075Z
Severity
  • 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input
Details

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM (an untrusted principal per the project's own threat model) can set it to true in any tool_use response. Combined with the default allowUnsandboxedCommands: true setting, a prompt-injected model can escape the sandbox for any arbitrary command, achieving full host-level code execution. This issue has been patched in version 0.5.1.

Database specific 
{
    "cwe_ids": [
        "CWE-284",
        "CWE-306"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42074.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/gitlawb/openclaude

Affected ranges

Type
GIT
Repo
https://github.com/gitlawb/openclaude
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c0b8a59a2377ebf49389d3e6adf41e6d255cb975
Fixed
aab489055c53dd64369414116fe93226d2656273
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.5.1"
        }
    ],
    "cpe": "cpe:2.3:a:gitlawb:openclaude:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v0.*
v0.1.6
v0.1.7
v0.1.8
v0.2.0
v0.2.1
v0.2.2
v0.2.3
v0.3.0
v0.4.0
v0.5.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42074.json"