Read the docs

harness

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

harness records in CISA KEV

No harness vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-35974 CVE-2025-58158 · GHSA-w469-hj2f-jpr5

Harness Affected by Arbitrary File Write in Gitness LFS server

Priority MEDIUM 41

Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00503 Published 2025-08-29 Fixed in 3.3.0, 1.0.4-gitspaces-beta.0.20250808064055-21c5ce42ae13 CWE-22
TI-2026-62496 CVE-2026-92750 · GHSA-38q4-gjc8-cq8c

Harness through 3.3.0 Missing Access Control via infraproviders endpoint

Priority LOW 31

Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated users to retrieve provider configurations from spaces they do not belong to.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00276 Published 2026-09-16 No fix listed CWE-862
Open these records in search →