Hkuds Openharness vulnerabilities

• hkuds openharness OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands CVE-2026-56696 5.3 MediumJune 23, 2026
• hkuds openharness OpenHarness - Cross-Session Disclosure via /resume and /summary Commands CVE-2026-56695 7.1 HighJune 23, 2026
• hkuds openharness HKUDS OpenHarness Remote Command Execution via /bridge Slash Command CVE-2026-7551 8.7 HighApril 30, 2026
• hkuds openharness HKUDS OpenHarness Insecure Default Remote Channel Allowlist CVE-2026-6823 8.3 HighApril 21, 2026
• hkuds openharness HKUDS OpenHarness Plugin Management Command Exposure CVE-2026-6819 8.7 HighApril 21, 2026
• hkuds openharness HKUDS OpenHarness Session Key Collision Privilege Escalation CVE-2026-6729 5.3 MediumApril 20, 2026
• hkuds openharness OpenHarness SSRF via web_fetch and web_search CVE-2026-40516 7.8 HighApril 17, 2026
• hkuds openharness OpenHarness Permission Bypass via grep and glob root argument CVE-2026-40515 8.7 HighApril 17, 2026
• hkuds openharness OpenHarness Remote Administrative Command Injection via Gateway Handler CVE-2026-40502 8.7 HighApril 16, 2026
• hkuds openharness OpenHarness Path Traversal Information Disclosure via /memory show CVE-2026-40503 7.1 HighApril 16, 2026
• hkuds openharness OpenHarness Improper Access Control via File Tools CVE-2026-22682 8.4 HighApril 7, 2026