Vulnerabilities

TI-2026-30441 CVE-2026-42073 · GHSA-c73c-x77g-854r

OpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoS

MEDIUM 62

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00255 Published 2026-06-02 Fixed in 0.5.1 CWE-352

TI-2026-30442 CVE-2026-42074 · GHSA-m77w-p5jj-xmhg

HIGH 81

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00589 Published 2026-06-02 Fixed in 0.5.1 CWE-284

TI-2026-27674 CVE-2026-35570 · GHSA-m6rx-7pvw-2f73

HIGH 72

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00232 Published 2026-04-20 Fixed in 0.5.1 CWE-22