HKUDS OpenHarness

• CVE-2026-56696 Medium 5.4 OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands 0.4%
• CVE-2026-56695 Medium 6.5 OpenHarness - Cross-Session Disclosure via /resume and /summary Commands 0.4%
• CVE-2026-7551 High 8.8 HKUDS OpenHarness Remote Command Execution via /bridge Slash Command 0.6%
• CVE-2026-6823 High 8.2 HKUDS OpenHarness Insecure Default Remote Channel Allowlist 0.3%
• CVE-2026-6819 High 8.8 HKUDS OpenHarness Plugin Management Command Exposure 0.3%
• CVE-2026-6729 Medium 6.3 HKUDS OpenHarness Session Key Collision Privilege Escalation 0.2%
• CVE-2026-40516 High 8.3 OpenHarness SSRF via web_fetch and web_search 0.2%
• CVE-2026-40515 High 7.5 OpenHarness Permission Bypass via grep and glob root argument 0.2%
• CVE-2026-40502 High 8.8 OpenHarness Remote Administrative Command Injection via Gateway Handler 1.7%
• CVE-2026-40503 Medium 6.5 OpenHarness Path Traversal Information Disclosure via /memory show 0.4%
• CVE-2026-22682 High 7.1 OpenHarness Improper Access Control via File Tools 0.1%