CVE-2026-56696

Medium

Description

OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/pr_comments.md files, which are subsequently injected into runtime system prompts, persistently influencing local agent behavior.

SeverityMedium

CVSS5.4

Exploit probability—

ProductOpenharness-ai

PublishedJun 23, 2026

First seenJun 23, 2026

Weakness typeCWE-862Missing authorization

How to fix

Patches

github.com/HKUDS/OpenHarness/commit/27bb93b810e9ea8fa4832eab7152eeb3b4a6bffb

Affected products

Product	Affected versions	Fixed in
openharness-aiPyPI	v ≤ 0.1.9	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.