Gitlawb vulnerabilities
We track 2 vulnerabilities in Gitlawb products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2026.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest Gitlawb vulnerabilities
- 9.8 Critical severity
openclaude: Improper Access Control
OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM (an untrusted principal per t
- 8.4 High severity
openclaude: Improper Limitation of a Pathname to a Restricted Directory
OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in `bashToolHasPermission()` inside `src/tools/BashTool/bashPermissions.ts`. When the sandbox auto-allow feature is