HKUDS OpenHarness Default Config Exposes Systems (CVE-2026-6823)

The National Vulnerability Database has issued an advisory for CVE-2026-6823, impacting HKUDS OpenHarness prior to PR #147. This high-severity vulnerability (CVSS 8.2) stems from an insecure default configuration where remote channels are set with allow_from = ["*"]. This permits arbitrary remote senders to bypass admission checks, granting unauthorized access.

Attackers who can reach the configured channel effectively bypass critical access controls. This allows them to interact with host-backed agent runtimes, according to the National Vulnerability Database. The immediate consequence is potential unauthorized file disclosure and read access through default-enabled read-only tools.

This isn’t a complex exploit; it’s a simple misconfiguration that opens the door. Defenders need to recognize that default-open settings are a gift to attackers. The attacker’s calculus is straightforward: find a reachable OpenHarness instance, leverage the default configuration, and start exfiltrating data. It’s low-effort, high-reward, particularly in environments where OpenHarness might be used for automation or data processing.