TI-2026-40875 Aliases CVE-2026-56695 GHSA-399c-3gm2-p29v

OpenHarness - Cross-Session Disclosure via /resume and /summary Commands

MEDIUM 64CWE-862Published 2026-06-23 · Updated 2026-11-08

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-862.

Summary

OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and file paths via shared gateway channels.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00402 34th percentileScored 2026-11-07

Fix Fixed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
HKUDS	OpenHarness	up to 0.1.9	—	Patch available	CNA
—	openharness-ai (PyPI)	up to 0.1.9	—	No fix listed	GHSA-399c-3gm2-p29v

OpenHarness VendorHKUDS Affected up to 0.1.9 Fixed in — Patch available CNA
openharness-ai (PyPI) Vendor— Affected up to 0.1.9 Fixed in — No fix listed GHSA-399c-3gm2-p29v

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:hkuds:openharness::::::::	—	—	HKUDS

cpe:2.3:a:hkuds:openharness:*:*:*:*:*:*:*:* Versions — — ·HKUDS

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2026-56695
2026-10-03 Alias added: GHSA-399c-3gm2-p29v

References

Patch 2

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-56695

Other 1

https://github.com/HKUDS/OpenHarness

TI-2026-44237 LightRAG: Missing Authentication for Critical API Functions in Default Configuration CVSS 3.1CRITICAL 9.8
TI-2026-78721 Missing authentication in HKUDS Vibe-Trading FastAPI server enables RCE CVSS 4.0CRITICAL 9.3
TI-2026-44184 Improper authentication in HKUDS LightRAG CVSS 4.0CRITICAL 9.3
TI-2026-26034 Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling CVSS 4.0HIGH 8.9
TI-2026-62432 HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool CVSS 4.0CRITICAL 9.2
TI-2026-25310 DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py CVSS 4.0HIGH 8.7

See all 47 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences