CVE-2026-40515High· 7.5▾ TwilightOpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exploiting incomplete path normalization in the permission checker. Attackers can invoke the built-in grep and …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exploiting incomplete path normalization in the permission checker. Attackers can invoke the built-in grep and glob tools with sensitive root directories that are not properly evaluated against configured path rules, allowing disclosure of sensitive local file content, key material, configuration files, or directory contents despite configured path restrictions.
OpenHarness < bd4df81f634f8c7cddcc3fdf7f561a13dcbf03aeRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-40516High· 8.3OpenHarness SSRF via web_fetch and web_search
CVE-2026-22682High· 7.1OpenHarness Improper Access Control via File Tools
CVE-2026-40502High· 8.8OpenHarness Remote Administrative Command Injection via Gateway Handler
CVE-2026-40503Medium· 6.5OpenHarness Path Traversal Information Disclosure via /memory show
CVE-2026-6729Medium· 6.3HKUDS OpenHarness Session Key Collision Privilege Escalation
CVE-2026-6819High· 8.8HKUDS OpenHarness Plugin Management Command Exposure