Advisories · Technology
HKUDS OpenHarness.
Every CVE that names HKUDS OpenHarness among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
HKUDS OpenHarness Remote Command Execution via /bridge Slash Command
- HKUDS OpenHarness
- Command injection
- CVSS 8.3 High
HKUDS OpenHarness Insecure Default Remote Channel Allowlist
- HKUDS OpenHarness
- Broken access control
- CVSS 8.7 High
HKUDS OpenHarness Plugin Management Command Exposure
- HKUDS OpenHarness
- Broken access control
- CVSS 5.3 Medium
HKUDS OpenHarness Session Key Collision Privilege Escalation
- HKUDS OpenHarness
- Authentication bypass
- CVSS 7.8 High
OpenHarness SSRF via web_fetch and web_search
- HKUDS OpenHarness
- Server-side request forgery (SSRF)
- CVSS 8.7 High
OpenHarness Permission Bypass via grep and glob root argument
- HKUDS OpenHarness
- Broken access control
- CVSS 8.7 High
OpenHarness Remote Administrative Command Injection via Gateway Handler
- HKUDS OpenHarness
- Broken access control
- CVSS 7.1 High
OpenHarness Path Traversal Information Disclosure via /memory show
- HKUDS OpenHarness
- Path traversal
- CVSS 8.4 High
OpenHarness Improper Access Control via File Tools
- HKUDS OpenHarness
- Broken access control