GitHub Advisoryadvisory · PyPI

GHSA-399c-3gm2-p29v OpenHarness remote resume commands expose other users' saved session snapshots

HIGH Published 2026-06-23 Modified 2026-09-04 Official page ↗
Aliases
CVE-2026-56695
Ecosystem
PyPI
Packages
openharness-ai
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-862
Reviewed
2026-09-04

Affected packages

• PyPI openharness-ai: <= 0.1.9 (no fix yet)

Description

OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and file paths via shared gateway channels.

Related

Alias · CVE (1)

  • CVE-2026-56695 OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to True, allowing admitted remote senders to… vulnerability

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References