GHSA-m77w-p5jj-xmhg: OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

OpenClaude's BashTool exposes a `dangerouslyDisableSandbox` parameter that an LLM can control, allowing it to bypass the sandbox (a restricted execution environment) and run arbitrary commands on the host system. The vulnerability exists because this security-critical flag defaults to allowing unsandboxed commands, contradicting the project's own threat model which states the LLM should not be trusted.