HKUDS OpenHarness Configuration read_file/write_file/edit_file/notebook_edit authorization

Summaryinfo

A vulnerability was found in HKUDS OpenHarness. It has been classified as problematic. This affects the function read_file/write_file/edit_file/notebook_edit of the component Configuration Handler. This manipulation causes authorization. This vulnerability is registered as CVE-2026-22682. The attack needs to be launched locally. No exploit is available. Applying a patch is the recommended action to fix this issue.

Detailsinfo

A vulnerability was found in HKUDS OpenHarness (unknown version). It has been declared as problematic. Affected by this vulnerability is the function read_file/write_file/edit_file/notebook_edit of the component Configuration Handler. The manipulation with an unknown input leads to a authorization vulnerability. The CWE definition for the vulnerability is CWE-863. The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in built-in file tools due to inconsistent parameter handling in permission enforcement, allowing attackers who can influence agent tool execution to read arbitrary local files outside the intended repository scope. Attackers can exploit the path parameter not being passed to the PermissionChecker in read_file, write_file, edit_file, and notebook_edit tools to bypass deny rules and access sensitive files such as configuration files, credentials, and SSH material, or create and overwrite files in restricted host paths in full_auto mode.

The weakness was published by Chia Min Jun Lennon. The advisory is shared at github.com. This vulnerability is known as CVE-2026-22682 since 01/08/2026. The exploitation appears to be easy. An attack has to be approached locally. Technical details are known, but no exploit is available.

Applying the patch 166fcfefb7614dbac51bd061f56542725b0298e9 is able to eliminate this problem. The bugfix is ready for download at github.com.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-19746). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• HKUDS

Name

• OpenHarness

License

• open-source

Website

• Product: https://github.com/HKUDS/OpenHarness/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion