CVE-2026-40516 - Vulnerability Analysis

Overview

OpenHarness before commit bd4df81 contains a server-side request forgery caused by improper validation of target addresses in web_fetch and web_search tools, letting attackers access private and localhost HTTP services remotely, exploit requires attacker to manipulate tool parameters.

Severity & Score

Impact

Attackers can access internal HTTP services, potentially exposing sensitive data from private networks or cloud metadata endpoints.

Mitigation

Update to the latest version including commit bd4df81 or later.

References

• https://github.com/HKUDS/OpenHarness/commit/bd4df81f634f8c7cddcc3fdf7f561a13dcbf03ae
• https://github.com/HKUDS/OpenHarness/pull/92
• https://www.vulncheck.com/advisories/openharness-ssrf-via-web-fetch-and-web-search

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner