CVE-2026-56696: Hkuds Openharness

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/pr_comments.md files, which are subsequently injected into runtime system prompts, persistently influencing local agent behavior.

Affected products

• Hkuds Openharness: up to and including 0.1.9

Published 2026-06-23. Last modified 2026-06-23.