CVE-2026-6823High· 8.2▾ MidnightPoC availableHKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_from = ["*"] permitting arbitrary remote senders to pass admission checks. Attackers who can reac…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 45.1 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_from = ["*"] permitting arbitrary remote senders to pass admission checks. Attackers who can reach the configured channel can bypass access controls and reach host-backed agent runtimes, potentially leading to unauthorized file disclosure and read access through default-enabled read-only tools.
OpenHarness < PR #147Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-6819High· 8.8HKUDS OpenHarness Plugin Management Command Exposure
CVE-2026-22682High· 7.1OpenHarness Improper Access Control via File Tools
CVE-2026-40516High· 8.3OpenHarness SSRF via web_fetch and web_search
CVE-2026-56695Medium· 6.5OpenHarness - Cross-Session Disclosure via /resume and /summary Commands
CVE-2026-56696Medium· 5.4OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands
CVE-2026-40502High· 8.8OpenHarness Remote Administrative Command Injection via Gateway Handler