The vulnerability in HKUDS OpenHarness (CVE-2026-40503) is due to improper limitation of a pathname to a restricted directory (CWE-22). Remote users with chat access can exploit the /memory show slash command by supplying path traversal sequences to access files outside the intended project memory directory. This occurs because the input parameter for the path is not validated to contain filesystem containment, allowing unauthorized file read access. The issue affects versions prior to commit dd1d235. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required beyond chat access, no user interaction, and high impact on confidentiality.

Successful exploitation allows remote users with chat access to read arbitrary files on the system accessible to the OpenHarness process. This can lead to disclosure of sensitive information stored outside the intended project memory directory. The vulnerability does not require user interaction and has a high confidentiality impact but no impact on integrity or availability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently available, users should monitor vendor communications for updates. Until a fix is released, restricting chat access to trusted users and limiting file permissions accessible to the OpenHarness process may reduce risk.