What’s Vulnerable › Products

HKUDS OpenHarness vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your HKUDS OpenHarness version is affected

Latest HKUDS OpenHarness vulnerabilities

• CVE-2026-56696 — OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands (CVSS 5.4)
• CVE-2026-56695 — OpenHarness - Cross-Session Disclosure via /resume and /summary Commands (CVSS 6.5)
• CVE-2026-7551 — HKUDS OpenHarness Remote Command Execution via /bridge Slash Command (CVSS 8.8)
• CVE-2026-6823 — HKUDS OpenHarness Insecure Default Remote Channel Allowlist (CVSS 8.2)
• CVE-2026-6819 — HKUDS OpenHarness Plugin Management Command Exposure (CVSS 8.8)
• CVE-2026-6729 — HKUDS OpenHarness Session Key Collision Privilege Escalation (CVSS 7.6)
• CVE-2026-40516 — OpenHarness SSRF via web_fetch and web_search (CVSS 6.3)
• CVE-2026-40515 — OpenHarness Permission Bypass via grep and glob root argument (CVSS 5.5)
• CVE-2026-40503 — OpenHarness Path Traversal Information Disclosure via /memory show (CVSS 6.5)
• CVE-2026-40502 — OpenHarness Remote Administrative Command Injection via Gateway Handler (CVSS 8.8)