CVE-2026-22682: OpenHarness Improper Access Control via File Tools
OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in built-in file tools due to inconsistent parameter handling in permission enforcement, allowing attackers who can influence agent tool execution to read arbitrary local files outside the intended repository scope. Attackers can exploit the path parameter not being passed to the PermissionChecker in readfile, writefile, editfile, and notebookedit tools to bypass deny rules and access sensitive files such as configuration files, credentials, and SSH material, or create and overwrite files in restricted host paths in fullauto mode.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenHarness (built-in file tools)to a version that resolves this vulnerability.Patch 166fcfe
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22682?
CVE-2026-22682 is classified as a medium severity vulnerability.
How do I fix CVE-2026-22682?
To fix CVE-2026-22682, upgrade OpenHarness to the version that includes commit 166fcfe or later.
What causes CVE-2026-22682?
CVE-2026-22682 is caused by improper access control due to inconsistent parameter handling in OpenHarness's built-in file tools.
Who is affected by CVE-2026-22682?
CVE-2026-22682 affects all versions of OpenHarness prior to commit 166fcfe.
What can attackers do with CVE-2026-22682?
Attackers can exploit CVE-2026-22682 to read arbitrary files by influencing agent tool execution.