Is CVE-2026-40515 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-40515 being exploited in the wild.

How severe is CVE-2026-40515?

High severity, with a CVSS score of 7.5, published 17 April 2026.

Which products and versions are affected?

HKUDS OpenHarness before commit bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae.

Is there a fix for CVE-2026-40515?

A patch was published on 2026-04-11: Fix merged in commit bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-40515 attacked?

It is attacked over the network or with local access, in a software library.

Am I affected by CVE-2026-40515?

Check whether you run HKUDS OpenHarness at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-40515: HKUDS OpenHarness permission bypass in grep and glob tools

CVE-2026-40515 · Severity: high · CVSS 7.5 · Published 2026-04-17

OpenHarness, an AI agent framework, contains a security flaw that allows the AI to access sensitive files on the host machine that should be restricted. By providing specific instructions to the AI, an attacker can trick the system into using built-in search tools to read private data like SSH keys, configuration files, or system directories. This could lead to the theft of sensitive credentials or intellectual property from the environment where the software is running.

Technologies: HKUDS OpenHarness. Vendors: HKUDS.

Quick answers

Is CVE-2026-40515 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-40515 being exploited in the wild.
How severe is CVE-2026-40515?: High severity, with a CVSS score of 7.5, published 17 April 2026.
Which products and versions are affected?: HKUDS OpenHarness before commit bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae.
Is there a fix for CVE-2026-40515?: A patch was published on 2026-04-11: Fix merged in commit bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-40515 attacked?: It is attacked over the network or with local access, in a software library.
Am I affected by CVE-2026-40515?: Check whether you run HKUDS OpenHarness at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A permission bypass vulnerability exists in OpenHarness due to incorrect authorization (CWE-863) and incomplete path normalization in the permission checker. The engine's query handler normalized 'file_path' and 'path' arguments but failed to normalize the 'root' argument used by the built-in grep and glob tools. An attacker can provide malicious prompt input that triggers these tools with a sensitive directory root (e.g., /home/user/.ssh), bypassing configured path rules and deny-globs. This allows for the disclosure of sensitive local file content and directory structures. The issue was addressed in commit bd4df81 by hardening path rules and ensuring the 'root' argument is properly normalized before permission evaluation.

Affected products

HKUDS OpenHarness before commit bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae

Timeline

2026-04-11: patched: Fix merged in commit bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae
2026-04-17: advisory: NVD and VulnCheck advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.