CVE-2026-22682 is an improper authorization vulnerability (CWE-863) in HKUDS OpenHarness prior to commit 166fcfe. The issue is caused by inconsistent handling of the path parameter in permission enforcement within built-in file tools (read_file, write_file, edit_file, notebook_edit). Because the path parameter is not passed to the PermissionChecker, deny rules can be bypassed, enabling attackers with limited privileges who can influence agent tool execution to read or write arbitrary files outside the intended repository scope. This includes sensitive files such as configuration files, credentials, and SSH materials. The vulnerability affects version 0 of OpenHarness as explicitly stated. No official patch or remediation level is provided in the available data.

An attacker with limited privileges who can influence the execution of agent tools can bypass access control restrictions to read sensitive local files or create/overwrite files in restricted host paths. This could lead to disclosure of confidential information such as configuration data, credentials, and SSH keys, potentially facilitating further compromise. The vulnerability has a high severity with a CVSS 4.0 score of 8.4, indicating significant impact on confidentiality and integrity with low attack complexity and no user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor HKUDS advisories for updates. Until a fix is available, restrict access to agent tool execution to trusted users only and avoid running in full_auto mode if possible to reduce risk of unauthorized file access or modification.