OpenHarness before commit bd4df81 contains a SSRF vulnerability in the web_fetch and web_search tools. Attackers can exploit this by influencing an agent session to invoke these tools with manipulated parameters targeting loopback, RFC1918, link-local, or other non-public addresses. This allows unauthorized access to internal HTTP services reachable from the victim host, potentially exposing sensitive information from local development services, cloud metadata endpoints, or administrative interfaces. The vulnerability arises from lack of proper validation of target addresses in these tools.

An attacker can leverage this SSRF vulnerability to access internal network resources and services that are normally inaccessible externally. This includes reading response data from localhost services, private IP ranges, and cloud metadata endpoints, which may disclose sensitive information or enable further attacks. The vulnerability does not require privileges or user interaction, increasing its risk. However, no known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor HKUDS advisories for updates. Until a patch is available, avoid exposing the vulnerable tools to untrusted inputs or restrict access to trusted users only.