Vulnerability · Published Apr 17, 2026 · Assigned by VulnCheck

CVE-2026-40515OpenHarness Permission Bypass via grep and glob root argument

High 7.5

In plain English

A high-severity incorrect authorization in OpenHarness from HKUDS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.2%top 86.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exploiting incomplete path normalization in the permission checker. Attackers can invoke the built-in grep and glob tools with sensitive root directories that are not properly evaluated against configured path rules, allowing disclosure of sensitive local file content, key material, configuration files, or directory contents despite configured path restrictions.

Affected products (as reported)

Vendor	Product	Versions
HKUDS	OpenHarness	0 – before bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/HKUDS/OpenHarness/pull/92 issue-tracking
https://github.com/HKUDS/OpenHarness/commit/bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae patch
https://www.vulncheck.com/advisories/openharness-permission-bypass-via-grep-and-glob-root-argument third-party-advisory