RCE in Hkuds Openharness
CVE-2026-7551
HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded to the bridge session manager and executed through the shared shell subprocess helper, allowing them to spawn shell sessions as the OpenHarness process user and access local files, credentials, workspace state, and repository contents.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.006 (49.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Hkuds Openharness — versions 0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (issue-tracking, Exploit, Patch, Third Party Advisory, Issue Tracking)
- disclosure@vulncheck.com (Patch, patch)
- disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2026-7551?
- CVE-2026-7551 is a high-severity vulnerability in Hkuds Openharness, classified under OS Command Injection. CVSS score: 8.8/10. Published 2026-04-30.
- How severe is CVE-2026-7551?
- High severity. CVSS v3 base score is 8.8 out of 10.