How severe is CVE-2026-6823?

CVE-2026-6823 has a CVSS 3.x base score of 8.2, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity low, and availability none.

Is CVE-2026-6823 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-6823?

CVE-2026-6823 affects Hkuds Openharness. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-6823?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2026-6823 have an EU (EUVD) identifier?

Yes. CVE-2026-6823 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-24505.

When was CVE-2026-6823 published?

CVE-2026-6823 was published on 2026-04-21 and last updated on 2026-06-17.

CVE-2026-6823

CVE-2026-6823 is a high-severity vulnerability in Hkuds Openharness with a CVSS 3.x base score of 8.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-276.

Key facts

Severity: High (CVSS 3.x base score 8.2)
CVSS v4: 8.3
EPSS exploit prediction: 0% (26th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2026-24505
Weakness: CWE-276
Affected product: Hkuds Openharness
Published: 2026-04-21
Last modified: 2026-06-17

Description

HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_from = ["*"] permitting arbitrary remote senders to pass admission checks. Attackers who can reach the configured channel can bypass access controls and reach host-backed agent runtimes, potentially leading to unauthorized file disclosure and read access through default-enabled read-only tools.

Frequently asked questions

What is CVE-2026-6823?: HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_from = ["*"] permitting arbitrary remote senders to pass admission checks. Attackers who can reach the configured channel can bypass access controls and reach host-backed agent runtimes, potentially leading to unauthorized file disclosure and read access through default-enabled read-only tools.
How severe is CVE-2026-6823?: CVE-2026-6823 has a CVSS 3.x base score of 8.2, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity low, and availability none.
Is CVE-2026-6823 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-6823?: CVE-2026-6823 affects Hkuds Openharness. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-6823?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2026-6823 have an EU (EUVD) identifier?: Yes. CVE-2026-6823 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-24505.
When was CVE-2026-6823 published?: CVE-2026-6823 was published on 2026-04-21 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:hkuds:openharness:*:*:*:*:*:*:*:*

More vulnerabilities in Hkuds Openharness

CVE-2026-7551 — High (CVSS 8.8): HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote…
CVE-2026-6819 — High (CVSS 8.8): HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including /plugin install, /plugin…
CVE-2026-40502 — High (CVSS 8.8): OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with…
CVE-2026-40516 — High (CVSS 8.3): OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the web_fetch and web_search…
CVE-2026-40515 — High (CVSS 7.5): OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive…
CVE-2026-40503 — Medium (CVSS 6.5): OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat…

All CVEs affecting Hkuds Openharness →

Other CWE-276 (Incorrect Default Permissions) vulnerabilities

CVE-2022-42150 — Critical (CVSS 10.0): TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. The default…
CVE-2020-29492 — Critical (CVSS 10.0): Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote…
CVE-2020-29491 — Critical (CVSS 10.0): Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote…
CVE-2025-40585 — Critical (CVSS 9.9): A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR…
CVE-2019-19896 — Critical (CVSS 9.9): In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share. The…
CVE-2020-37129 — Critical (CVSS 9.8): Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the…

Browse all CWE-276 (Incorrect Default Permissions) vulnerabilities →