86 matches found
PYSEC-2026-3880 OpenHarness remote project-context commands allow persistent prompt poisoning
OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....
PYSEC-2026-3881 OpenHarness remote resume commands expose other users' saved session snapshots
OpenHarness ohmo gateway /resume and /summary slash commands default remoteinvocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and...
OpenHarness remote project-context commands allow persistent prompt poisoning
OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....
decidra (1.1.0) potentially affected by CVE-2026-56695 via openharness-ai (0.1.9)
openharness-ai PYPI version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on openharness-ai and may be impacted: - decidra 1.1.0 Source cves: CVE-2026-56695 Source advisory: OSV:PYSEC-2026-3881...
decidra (1.1.0) potentially affected by CVE-2026-56696 via openharness-ai (0.1.9)
openharness-ai PYPI version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on openharness-ai and may be impacted: - decidra 1.1.0 Source cves: CVE-2026-56696 Source advisory: OSV:PYSEC-2026-3880...
OpenHarness remote resume commands expose other users' saved session snapshots
OpenHarness ohmo gateway /resume and /summary slash commands default remoteinvocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and...
GHSA-24CW-228Q-3RX9 OpenHarness remote project-context commands allow persistent prompt poisoning
OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....
OpenHarness remote resume commands expose other users' saved session snapshots
OpenHarness ohmo gateway /resume and /summary slash commands default remoteinvocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and...
decidra (1.1.0) potentially affected by CVE-2026-56696 via openharness-ai (0.1.9)
openharness-ai PYPI version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on openharness-ai and may be impacted: - decidra 1.1.0 Source cves: CVE-2026-56696 Source advisory: OSV:GHSA-24CW-228Q-3RX9...
GHSA-399C-3GM2-P29V OpenHarness remote resume commands expose other users' saved session snapshots
OpenHarness ohmo gateway /resume and /summary slash commands default remoteinvocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and...
decidra (1.1.0) potentially affected by CVE-2026-56695 via openharness-ai (0.1.9)
openharness-ai PYPI version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on openharness-ai and may be impacted: - decidra 1.1.0 Source cves: CVE-2026-56695 Source advisory: GHSA-399C-3GM2-P29V...
decidra (1.1.0) potentially affected by CVE-2026-56695 via openharness-ai (0.1.9)
openharness-ai PYPI version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on openharness-ai and may be impacted: - decidra 1.1.0 Source cves: CVE-2026-56695 Source advisory: OSV:GHSA-399C-3GM2-P29V...
OpenHarness remote project-context commands allow persistent prompt poisoning
OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....
decidra (1.1.0) potentially affected by CVE-2026-56696 via openharness-ai (0.1.9)
openharness-ai PYPI version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on openharness-ai and may be impacted: - decidra 1.1.0 Source cves: CVE-2026-56696 Source advisory: GHSA-24CW-228Q-3RX9...
CVE-2026-56696
OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....
CVE-2026-56695
OpenHarness ohmo gateway /resume and /summary slash commands default remoteinvocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and...
EUVD-2026-38469
OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....
CVE-2026-56696 OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands
OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....
CVE-2026-56696
OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....
EUVD-2026-38467
OpenHarness ohmo gateway /resume and /summary slash commands default remoteinvocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and...