Medium severity · published Jun 23, 2026
CVE-2026-56695
OpenHarness - Cross-Session Disclosure via /resume and /summary Commands
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and file paths via shared gateway channels.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenHarness · HKUDS
through 0.1.9 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-56695
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-56695
github.com
https://github.com/HKUDS/OpenHarness/commit/92e298852c9b9c8c2266236292073623418c640a
github.com
https://github.com/HKUDS/OpenHarness/pull/276
www.vulncheck.com
https://www.vulncheck.com/advisories/openharness-cross-session-disclosure-via-resume-and-summary-commands
More from OpenHarness
8.8
CVE-2026-7551
HKUDS OpenHarness Remote Command Execution via /bridge Slash Command
8.8
CVE-2026-6819
HKUDS OpenHarness Plugin Management Command Exposure
8.8
CVE-2026-40502
OpenHarness Remote Administrative Command Injection via Gateway Handler
8.2
CVE-2026-6823
HKUDS OpenHarness Insecure Default Remote Channel Allowlist
7.6
CVE-2026-6729
HKUDS OpenHarness Session Key Collision Privilege Escalation