CVE-2026-56696 · Symaro Security Advisory

Description

OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/pr_comments.md files, which are subsequently injected into runtime system prompts, persistently influencing local agent behavior.

Severity (CVSS)

Base score	5.3
Severity	Medium
Version	CVSS 4.0
Vector	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Provided by	CNA

Weaknesses

CWE-862 — Missing Authorization

Affected products

Vendor	Product	Versions
HKUDS	OpenHarness	0 to <=0.1.9; 27bb93b810e9ea8fa4832eab7152eeb3b4a6bffb

References

https://github.com/HKUDS/OpenHarness/pull/272 (issue-tracking)
https://github.com/HKUDS/OpenHarness/commit/27bb93b810e9ea8fa4832eab7152eeb3b4a6bffb (patch)
https://www.vulncheck.com/advisories/openharness-prompt-injection-via-issue-and-pr-comments-slash-commands (third-party-advisory)

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 24 Jun 2026 09:35 UTC.