Loading story…
Two high-severity vulnerabilities in OpenHarness exposed administrative functionality to remote users through the platform’s gateway and channel layers. CVE-2026-40502 affects versions prior to commit dd1d235 and stems from insufficient separation between local-only and remote-safe commands in the gateway handler, allowing remote gateway users with chat access to invoke sensitive administrative actions such as changing permission modes on a running instance without operator approval. The issue is classified as CWE-862 and carries a CVSS v3.1 score vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
A second flaw, CVE-2026-6819, affects HKUDS OpenHarness prior to the fix delivered in pull request #156 and later release v0.1.7, exposing plugin lifecycle commands including /plugin install, /plugin enable, /plugin disable, and /reload-plugins to remote senders by default. An attacker who gains access through the channel layer could use the weakness to install or activate untrusted plugins and alter plugin trust state remotely, creating a path to full compromise of confidentiality, integrity, and availability. The vulnerability is tracked as CWE-276 with CVSS v3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
On 2026-04-21, CVE-2026-6819 was disclosed for HKUDS OpenHarness, affecting versions prior to remediation in pull request #156 and the related v0.1.7 release. The issue exposed plugin management commands such as install, enable, disable, and reload to remote senders by default, enabling unauthorized plugin installation and activation if channel-layer access was obtained.
On 2026-04-16, CVE-2026-40502 was disclosed affecting OpenHarness before commit dd1d235. The gateway handler flaw allowed remote gateway users with chat access to invoke sensitive administrative commands, including changing permission modes without operator authorization.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A critical vulnerability, **CVE-2026-82533**, in DeepSeek Harness allows attacker-influenced AI coding agents to bypass the tool’s local control-plane authentication and switch their own sessions to `danger-full-access`. The HTTP API trusted a client-supplied `Host` header instead of validating the TCP peer, enabling a sandboxed agent to reach the loopback interface, disable file-write restrictions and approval prompts, and execute privileged commands without credentials, user approval, configuration changes, or external network exposure. The flaw affects DeepSeek Harness `0.1.1-rc.2` and earlier. It can also expose stored conversations and session logs; remote attackers would require an existing port forward, tunnel, or proxy because the CLI does not bind externally by default. DeepSeek addressed the issue by adding one-time-token authentication, with fixed releases reported from `0.1.2-alpha.1` onward; organizations should update to a current patched release and review local API exposure, tunnels, proxies, and potentially compromised session data.
Sep 9, 2026
Two high-severity vulnerabilities in OpenClaw exposed paths for authenticated users to gain access beyond their intended roles. **CVE-2026-32042** affects versions before `2026.2.25` and allows an attacker with valid shared gateway authentication to present a self-signed, unpaired device identity and bypass pairing requirements, then self-assign elevated operator scopes including `operator.admin`. The issue is classified as `CWE-863` and effectively turns a trusted but unapproved device identity into a route for privilege escalation. A second flaw, **CVE-2026-32051**, affects OpenClaw versions before `2026.3.1` and allows users with `operator.write` scope to reach owner-only tool surfaces such as gateway and cron through agent runs in scoped-token deployments. The authorization mismatch lets lower-privileged authenticated users perform control-plane actions that should be restricted to owners, creating high risk to confidentiality, integrity, and availability. Advisories for both issues point to fixes and security guidance through GitHub and VulnCheck.
Jun 29, 2026
Two high-severity vulnerabilities were disclosed in **OneUptime**, an open-source monitoring and observability platform, affecting webhook handling and synthetic monitoring. **CVE-2026-33143** impacts versions before `10.0.34` and stems from missing verification of the Meta/WhatsApp `X-Hub-Signature-256` HMAC signature in the `POST /notification/whatsapp/webhook` handler. An unauthenticated attacker could forge WhatsApp status update payloads, manipulate notification delivery records, suppress alerts, and corrupt audit trails. The issue was classified as `CWE-345` and patched in version `10.0.34`. A second flaw, **CVE-2026-33396**, affects versions before `10.0.35` and allows a low-privileged authenticated user with the **ProjectMember** role to achieve remote command execution on the Probe container or host through Synthetic Monitor Playwright script execution. The weakness lies in `VMRunner.runCodeInNodeVM`, where sandboxed code retained access to a live Playwright page object and could reach dangerous methods such as `_browserType.launchServer(...)`, bypassing an incomplete denylist. The vulnerability was mapped to `CWE-78`, `CWE-693`, and `CWE-184`, carries a `CVSS:3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H` rating, and was fixed in **OneUptime** version `10.0.35`.
Jun 29, 2026