CVE-2026-56695

OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to True, allowing admitted remote senders to enumerate and load arbitrary session snapshots by ID. Attackers can exploit this to access victim snapshots containing private prompts, credentials, tool output, and file paths via shared gateway channels.

CVSS 4.0

7.1CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-25)

CWE

CWE-862

Published

2026-06-23

Modified

2026-10-26

Record from

the NVD, synced 2026-10-26

Packages (OSV)

References

• https://github.com/HKUDS/OpenHarness/commit/92e298852c9b9c8c2266236292073623418c640a
• https://github.com/HKUDS/OpenHarness/pull/276
• https://www.vulncheck.com/advisories/openharness-cross-session-disclosure-via-resume-and-summary-commands
• https://github.com/HKUDS/OpenHarness/pull/276

Check your stackJSON