OP
Product
OpenHarness
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 5Low 0
Watch
Add OpenHarness to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7551 | 8.8 | Apr 30 | HKUDS OpenHarness Remote Command Execution via /bridge Slash Command Affected: before 438e373 |
| CVE-2026-6819 | 8.8 | Apr 21 | HKUDS OpenHarness Plugin Management Command Exposure Affected: before PR #156 |
| CVE-2026-40502 | 8.8 | Apr 16 | OpenHarness Remote Administrative Command Injection via Gateway Handler Affected: before dd1d235450dd987b20bff01b7bfb02fe8620a0af |
| CVE-2026-6823 | 8.2 | Apr 21 | HKUDS OpenHarness Insecure Default Remote Channel Allowlist Affected: before PR #147 |
| CVE-2026-6729 | 7.6 | Apr 20 | HKUDS OpenHarness Session Key Collision Privilege Escalation Affected: before PR #159 |
| CVE-2026-22682 | 7.1 | Apr 7 | OpenHarness Improper Access Control via File Tools Affected: before 166fcfefb7614dbac51bd061f56542725b0298e9 |
| CVE-2026-56695 | 6.5 | Jun 23 | OpenHarness - Cross-Session Disclosure via /resume and /summary Commands Affected: through 0.1.9 |
| CVE-2026-40503 | 6.5 | Apr 16 | OpenHarness Path Traversal Information Disclosure via /memory show Affected: before dd1d235450dd987b20bff01b7bfb02fe8620a0af |
| CVE-2026-40516 | 6.3 | Apr 17 | OpenHarness SSRF via web_fetch and web_search Affected: before bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae |
| CVE-2026-40515 | 5.5 | Apr 17 | OpenHarness Permission Bypass via grep and glob root argument Affected: before bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae |
| CVE-2026-56696 | 5.4 | Jun 23 | OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands Affected: through 0.1.9 |
Showing 11