The vulnerability in HKUDS OpenHarness (prior to commit bd4df81) is due to incorrect authorization (CWE-863) caused by incomplete path normalization in the permission checking mechanism. This flaw allows attackers to bypass intended path restrictions and access sensitive files by leveraging the built-in grep and glob tools with root directories that the system fails to properly evaluate against configured path rules. As a result, attackers can disclose sensitive local file contents, including key material and configuration files, despite existing path restrictions.

Successful exploitation can lead to unauthorized disclosure of sensitive local files, including key material and configuration files, which may compromise system confidentiality and security. The vulnerability does not require privileges, user interaction, or special attack complexity, increasing its risk. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability is fixed starting from commit bd4df81, upgrading to this or a later version is recommended once official patches or updates are released. Until then, restrict access to vulnerable versions and monitor for updates from the vendor.