Skip to content
GGitlawb
Products
| Product | CVEs | Exploited | Latest |
|---|
| openclaude | 4 | – | Sep 14, 2026 |
Exploited and recent CVEs
-
CVE-2026-90712
Medium 4.3
Gitlawb openclaude xAI OAuth Callback xaiOAuthCallback.ts waitForCallback denial of service
0.6%
-
CVE-2026-42073
Medium 6.5
OpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoS
0.3%
-
CVE-2026-42074
Critical 9.3
OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input
0.6%
-
CVE-2026-35570
High 8.4
OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversal
0.2%