CVE-2026-22682

OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in built-in file tools due to inconsistent parameter handling in permission enforcement, allowing attackers who can influence agent tool execution to read arbitrary local files outside the intended repository scope. Attackers can exploit the path parameter not being passed to the PermissionChecker in read_file, write_file, edit_file, and notebook_edit tools to bypass deny rules and access sensitive files such as configuration files, credentials, and SSH material, or create and overwrite files in restricted host paths in full_auto mode.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/HKUDS/OpenHarness/commit/166fcfefb7614dbac51bd061f56542725b0298e9
https://github.com/HKUDS/OpenHarness/pull/32
https://www.vulncheck.com/advisories/openharness-improper-access-control-via-file-tools

Configurations

No configuration.

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) OpenHarness anterior al commit 166fcfe contiene una vulnerabilidad de control de acceso inadecuado en las herramientas de archivo integradas debido a un manejo inconsistente de parámetros en la aplicación de permisos, lo que permite a los atacantes que pueden influir en la ejecución de la herramienta del agente leer archivos locales arbitrarios fuera del alcance del repositorio previsto. Los atacantes pueden explotar el parámetro de ruta que no se pasa al PermissionChecker en las herramientas read_file, write_file, edit_file y notebook_edit para eludir las reglas de denegación y acceder a archivos sensibles como archivos de configuración, credenciales y material SSH, o crear y sobrescribir archivos en rutas de host restringidas en modo full_auto.

Information

Published : 2026-04-07 18:16

Updated : 2026-10-26 22:10

NVD link : CVE-2026-22682

Mitre link : CVE-2026-22682

CVE.ORG link : CVE-2026-22682

JSON object : View

Products Affected

No product.

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2026-22682", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22682", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-09T15:43:28.804048Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.4, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/HKUDS/OpenHarness", "vendor": "HKUDS", "product": "OpenHarness", "versions": [{"status": "affected", "version": "0", "lessThan": "166fcfefb7614dbac51bd061f56542725b0298e9", "versionType": "git"}], "packageURL": "pkg:github/HKUDS/OpenHarness", "defaultStatus": "unaffected"}]}], "published": "2026-04-07T18:16:39.033", "references": [{"url": "https://github.com/HKUDS/OpenHarness/commit/166fcfefb7614dbac51bd061f56542725b0298e9", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/HKUDS/OpenHarness/pull/32", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/openharness-improper-access-control-via-file-tools", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "OpenHarness prior to commit 166fcfe\u00a0contains an improper access control vulnerability in built-in file tools due to inconsistent parameter handling in permission enforcement, allowing attackers who can influence agent tool execution to read arbitrary local files outside the intended repository scope. Attackers can exploit the path parameter not being passed to the PermissionChecker in read_file, write_file, edit_file, and notebook_edit tools to bypass deny rules and access sensitive files such as configuration files, credentials, and SSH material, or create and overwrite files in restricted host paths in full_auto mode."}, {"lang": "es", "value": "OpenHarness anterior al commit 166fcfe contiene una vulnerabilidad de control de acceso inadecuado en las herramientas de archivo integradas debido a un manejo inconsistente de par\u00e1metros en la aplicaci\u00f3n de permisos, lo que permite a los atacantes que pueden influir en la ejecuci\u00f3n de la herramienta del agente leer archivos locales arbitrarios fuera del alcance del repositorio previsto. Los atacantes pueden explotar el par\u00e1metro de ruta que no se pasa al PermissionChecker en las herramientas read_file, write_file, edit_file y notebook_edit para eludir las reglas de denegaci\u00f3n y acceder a archivos sensibles como archivos de configuraci\u00f3n, credenciales y material SSH, o crear y sobrescribir archivos en rutas de host restringidas en modo full_auto."}], "lastModified": "2026-10-26T22:10:00.163", "sourceIdentifier": "disclosure@vulncheck.com"}