Severity:
CRITICAL RISK
(9.8)
Improper Access Control on Sandbox Configuration (CWE-284) in OpenClaude BashTool
CVE-2026-42074
Published:
Status:
Analyzed
Summary
Affected Context
Exploit Preconditions
Why This Happens
Potential Impact
General Mitigation Guidance
How Teams Detect Issues Like This
Frequently Asked Questions
Source
NDV
Recent Vulnerabilities
CWE-266;CWE-285
(7.3)
Improper Authorization (CWE-285) in BeikeShop Stripe Plugin Callback
Authorization Bypass Leading to Unauthorized Actions
CWE-20;CWE-1287
(7.3)
Improper Input Validation (CWE-20) in Boost Serialization ≤ 1.91
Remote Attack Surface via Malformed Serialized Data (Potential DoS / Data Integrity Violation)
