CVE-2026-7551

HIGH EPSS 46.5%
Published Apr 30, 20262mo ago · Modified Jun 17, 20262w ago
8.7 CVSS 4.0
High
Find Similar
Published Apr 30, 2026 2mo ago
Last Modified Jun 17, 2026 2w ago

Description

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded to the bridge session manager and executed through the shared shell subprocess helper, allowing them to spawn shell sessions as the OpenHarness process user and access local files, credentials, workspace state, and repository contents.

CVSS Details

Base Score
8.7
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
46.5% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-78 OS Command Injection Injection

Affected Products 1

VendorProductVersionRange
hkudsopenharness* <2026-04-27

References 3

  • github.com https://github.com/HKUDS/OpenHarness/commit/438e37309778e19060dfe7b172eb142e543c4cd6
    Patch
  • github.com https://github.com/HKUDS/OpenHarness/pull/208
    ExploitIssue TrackingPatchThird Party Advisory
  • vulncheck.com https://www.vulncheck.com/advisories/hkuds-openharness-remote-command-execution-via-bridge-slash-command
    Third Party Advisory

Remediation

  • github.com https://github.com/HKUDS/OpenHarness/commit/438e37309778e19060dfe7b172eb142e543c4cd6
    Patch
  • github.com https://github.com/HKUDS/OpenHarness/pull/208
    ExploitIssue TrackingPatchThird Party Advisory