The vulnerability in HKUDS OpenHarness (CVE-2026-56695) involves missing authorization controls on the /resume and /summary slash commands. These commands are remotely invocable by default, enabling remote users with admission to the gateway to enumerate and access arbitrary session snapshots by their IDs. Exploiting this flaw allows attackers to retrieve sensitive information such as private prompts, credentials, tool output, and file paths from victim snapshots shared via gateway channels. The CVSS 4.0 base score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required beyond admission, and no user interaction needed. The vulnerability affects versions up to and including 0.1.9. No official patch or remediation guidance is currently available.

An attacker who is an admitted remote sender can enumerate and load arbitrary session snapshots by ID, potentially exposing sensitive data including private prompts, credentials, tool outputs, and file paths. This exposure could lead to information disclosure and compromise of confidential data shared within the OpenHarness environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the OpenHarness gateway to trusted users only and monitor for unauthorized access attempts. Consider disabling or restricting the /resume and /summary commands if possible to limit exposure.