HKUDS OpenHarness versions before the PR #147 fix have an insecure default configuration vulnerability (CWE-276) where remote channels inherit overly permissive access controls (allow_from = ["*"]). This allows arbitrary remote senders to bypass admission checks and access host-backed agent runtimes. The vulnerability can result in unauthorized file disclosure and read access through default-enabled read-only tools. The CVSS 4.0 score is 8.3 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality.

Attackers able to reach the configured remote channels can bypass access controls and gain unauthorized read access to files on the host via agent runtimes. This can lead to sensitive information disclosure. There are no known exploits in the wild at this time. The vulnerability affects confidentiality primarily, with limited impact on integrity and availability.

Patch status is not yet confirmed — no official fix or remediation level has been published, and no patch links are available. Users should monitor the vendor advisory for updates regarding an official fix or temporary mitigations. Until a patch is available, restricting network access to the affected channels and disabling or reconfiguring default remote channels to limit allowed senders may reduce exposure.