HKUDS OpenHarness prior to the remediation introduced in PR #147 contains an incorrect default permissions vulnerability (CWE-276). Remote channels inherit a permissive configuration (allow_from = ["*"]) that permits arbitrary remote senders to bypass access controls. Attackers able to reach these channels can access host-backed agent runtimes, potentially resulting in unauthorized file disclosure and read access through tools enabled by default in read-only mode. The vulnerability is tracked as CVE-2026-6823 with a CVSS 4.0 score of 8.3 (high severity). No patch or official remediation level has been published as of the data provided.

The vulnerability allows remote attackers to bypass access controls on OpenHarness remote channels due to overly permissive default settings. This can lead to unauthorized disclosure of files and read access to host-backed agent runtimes. The impact is significant given the high CVSS score, indicating network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact. However, no known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability is noted as fixed in PR #147, so applying that remediation or any subsequent official fix from the vendor is recommended once available. Until then, restricting network access to the affected channels and reviewing configuration to avoid default permissive settings may reduce exposure.