CVE-2026-56695: OpenHarness - Cross-Session Disclosure via /resume and /summary Commands
OpenHarness ohmo gateway /resume and /summary slash commands default remoteinvocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and file paths via shared gateway channels.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56695?
The severity of CVE-2026-56695 is medium with a score of 6.5.
How does CVE-2026-56695 allow for cross-session disclosure?
CVE-2026-56695 allows admitted remote senders to access arbitrary session snapshots by ID through the /resume and /summary commands.
What can attackers gain from exploiting CVE-2026-56695?
Attackers can access private prompts, credentials, and tool outputs from victim snapshots.
Which software is affected by CVE-2026-56695?
The vulnerability affects the OpenHarness ohmo gateway.
How can I mitigate CVE-2026-56695?
To mitigate CVE-2026-56695, disable the default remote_invocable setting for the /resume and /summary commands.