HKUDS OpenHarness contains an OS command injection vulnerability (CWE-78) in the /bridge slash command interface. Remote attackers accepted by configuration can invoke the /bridge spawn command with attacker-controlled command text, which is forwarded to the bridge session manager and executed through a shared shell subprocess helper. This allows spawning shell sessions as the OpenHarness process user, potentially exposing sensitive local resources and data. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity. No patch or official remediation level has been provided as of the publication date.

Successful exploitation enables remote code execution with the privileges of the OpenHarness process user. Attackers can spawn shell sessions, access local files, credentials, workspace state, and repository contents, leading to significant confidentiality and integrity impacts. The vulnerability does not require user interaction and has low attack complexity, increasing its risk. No known exploits are reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /bridge slash command to trusted users only and monitor for suspicious activity related to command execution. Avoid exposing the OpenHarness interface to untrusted networks.