CVE-2025-26474

LOW EPSS 3.5%

Published Mar 16, 20263mo ago · Modified Jun 17, 20261w ago

3.3 CVSS 3.1

Low

Published Mar 16, 2026 3mo ago

Last Modified Jun 17, 2026 1w ago

Description

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.

CVSS Details

Base Score

3.3

Exploitability

1.8

Impact

1.4

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality Low

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

3.5% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 1

Vendor	Product	Version	Range
openatom	openharmony	5.0.3	any

References 1

gitcode.com https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2025/2025-09.md

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.