The vulnerability in HKUDS OpenHarness arises because the /resume and /summary slash commands are configured with remote_invocable set to True by default. This misconfiguration permits admitted remote senders to enumerate and load session snapshots arbitrarily by their IDs. Exploiting this flaw enables attackers to access sensitive data contained in victim snapshots, including private prompts, credentials, tool output, and file paths, via shared gateway channels. The CVSS 4.0 base score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required beyond admitted remote sender status, no user interaction, and high impact on confidentiality.

An attacker with admitted remote sender privileges can enumerate and retrieve arbitrary session snapshots from the OpenHarness ohmo gateway. This leads to unauthorized disclosure of sensitive information such as private prompts, credentials, tool outputs, and file paths. The confidentiality impact is high, while integrity and availability impacts are not indicated. This exposure could compromise user privacy and security of the system relying on OpenHarness.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the ohmo gateway commands /resume and /summary to trusted users only, and consider disabling or modifying the remote_invocable setting to prevent unauthorized enumeration and loading of session snapshots.