CVE-2026-40515

OpenHarness Permission Bypass via grep and glob root argument

State: Published
Severity: 8.7 High
Published: Apr 17, 2026
Updated: Jul 14, 2026
Reserved: Apr 13, 2026

Description

OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exploiting incomplete path normalization in the permission checker. Attackers can invoke the built-in grep and glob tools with sensitive root directories that are not properly evaluated against configured path rules, allowing disclosure of sensitive local file content, key material, configuration files, or directory contents despite configured path restrictions.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	VulnCheck
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	VulnCheck

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
OpenHarnessHKUDS	before bd4df81f634f8c7cddcc3fdf7f561a13dcbf03aeAffected

References

https://github.com/HKUDS/OpenHarness/pull/92issue-tracking
https://github.com/HKUDS/OpenHarness/commit/bd4df81f634f8c7cddcc3fdf7f561a13dcbf03aepatch
https://www.vulncheck.com/advisories/openharness-permission-bypass-via-grep-and-glob-root-argumentthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.