Is CVE-2026-22682 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-22682 being exploited in the wild.

How severe is CVE-2026-22682?

High severity, with a CVSS score of 7.1, published 7 April 2026.

Which products and versions are affected?

HKUDS OpenHarness prior to commit 166fcfe.

Is there a fix for CVE-2026-22682?

A patch was published on 2026-04-05: Fix merged in pull request #32 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-22682 attacked?

It is attacked with local access, in a software library.

Am I affected by CVE-2026-22682?

Check whether you run HKUDS OpenHarness at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-22682: HKUDS OpenHarness improper access control in built-in file tools

CVE-2026-22682 · Severity: high · CVSS 7.1 · Published 2026-04-07

OpenHarness, a tool for managing AI agent workflows, contains a security flaw in how it restricts access to files on the host system. Due to a technical oversight, the software fails to apply security rules to certain file-related commands, allowing an attacker to bypass intended restrictions. This could lead to the theft of sensitive data like SSH keys and credentials, or the unauthorized modification of critical system files.

Technologies: HKUDS OpenHarness. Vendors: HKUDS.

Quick answers

Is CVE-2026-22682 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-22682 being exploited in the wild.
How severe is CVE-2026-22682?: High severity, with a CVSS score of 7.1, published 7 April 2026.
Which products and versions are affected?: HKUDS OpenHarness prior to commit 166fcfe.
Is there a fix for CVE-2026-22682?: A patch was published on 2026-04-05: Fix merged in pull request #32 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-22682 attacked?: It is attacked with local access, in a software library.
Am I affected by CVE-2026-22682?: Check whether you run HKUDS OpenHarness at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper access control vulnerability (CWE-863) exists in OpenHarness due to inconsistent parameter handling between the query runner and the PermissionChecker. While the permission layer expects a 'file_path' parameter to enforce path-based rules, several core tools (read_file, write_file, edit_file, and notebook_edit) use a 'path' parameter, which was not being forwarded for evaluation. A local attacker who can influence agent tool execution can exploit this mismatch to bypass 'deny' rules, enabling arbitrary file reads in default mode and unauthorized file writes/overwrites when the session is in 'full_auto' mode. The vulnerability is addressed in commit 166fcfe by normalizing path extraction and resolving relative paths against the session working directory before permission checks.

Affected products

HKUDS OpenHarness prior to commit 166fcfe

Timeline

2026-04-05: patched: Fix merged in pull request #32
2026-04-07: advisory: CVE-2026-22682 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.