OpenHarness
HKUDS- Product type
- Other
- Catalog vulnerabilities
- 11
Severity across 11 analyzed records
Verify to analyze this security profile
en
As of 09/18/2026, within CyStack's analyzed data, OpenHarness has 2 security vulnerabilities published in the last 90 days. Of these, 1 is rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of OpenHarness and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-56696OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands | Exploitation statusPublic exploit | FixYes | Published06/23/2026 | SeverityMedium |
CVE-2026-56695OpenHarness - Cross-Session Disclosure via /resume and /summary Commands | Exploitation statusPublic exploit | FixYes | Published06/23/2026 | SeverityHigh |
CVE-2026-7551HKUDS OpenHarness Remote Command Execution via /bridge Slash Command | Exploitation statusNot known exploited | FixYes | Published04/30/2026 | SeverityHigh |
CVE-2026-6823HKUDS OpenHarness Insecure Default Remote Channel Allowlist | Exploitation statusPublic exploit | FixYes | Published04/21/2026 | SeverityHigh |
CVE-2026-6819HKUDS OpenHarness Plugin Management Command Exposure | Exploitation statusNot known exploited | FixYes | Published04/21/2026 | SeverityHigh |
CVE-2026-6729HKUDS OpenHarness Session Key Collision Privilege Escalation | Exploitation statusNot known exploited | FixYes | Published04/20/2026 | SeverityMedium |
CVE-2026-40516OpenHarness SSRF via web_fetch and web_search | Exploitation statusPublic exploit | FixYes | Published04/17/2026 | SeverityHigh |
CVE-2026-40515OpenHarness Permission Bypass via grep and glob root argument | Exploitation statusNot known exploited | FixYes | Published04/17/2026 | SeverityHigh |
CVE-2026-40502OpenHarness Remote Administrative Command Injection via Gateway Handler | Exploitation statusNot known exploited | FixYes | Published04/16/2026 | SeverityHigh |
CVE-2026-40503OpenHarness Path Traversal Information Disclosure via /memory show | Exploitation statusNot known exploited | FixYes | Published04/16/2026 | SeverityHigh |
CVE-2026-22682OpenHarness Improper Access Control via File Tools | Exploitation statusPublic exploit | FixYes | Published04/07/2026 | SeverityHigh |