Vulnerability · Published Apr 16, 2026 · Assigned by VulnCheck

CVE-2026-40503OpenHarness Path Traversal Information Disclosure via /memory show

Medium 6.5

In plain English

A medium-severity path traversal in OpenHarness from HKUDS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.4%top 64.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supplying path traversal sequences to the /memory show slash command. Attackers can manipulate the path input parameter to escape the project memory directory and access sensitive files accessible to the OpenHarness process without filesystem containment validation.

Affected products (as reported)

Vendor	Product	Versions
HKUDS	OpenHarness	0 – before dd1d235450dd987b20bff01b7bfb02fe8620a0af

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/HKUDS/OpenHarness/pull/127 issue-tracking
https://github.com/HKUDS/OpenHarness/commit/dd1d235450dd987b20bff01b7bfb02fe8620a0af patch
https://www.vulncheck.com/advisories/openharness-path-traversal-information-disclosure-via-memory-show third-party-advisory