CVE-2026-7551 - Vulnerability Analysis

Overview

HKUDS OpenHarness contains a remote code execution caused by improper validation in the /bridge slash command, letting remote attackers execute arbitrary OS commands, exploit requires attacker to be accepted by configuration.

Severity & Score

Impact

Remote attackers can execute arbitrary OS commands, potentially leading to full system compromise and access to sensitive files and credentials.

Mitigation

Update to the latest version with patched /bridge command handling.

References

• https://www.vulncheck.com/advisories/hkuds-openharness-remote-command-execution-via-bridge-slash-command
• https://github.com/HKUDS/OpenHarness/commit/438e37309778e19060dfe7b172eb142e543c4cd6
• https://github.com/HKUDS/OpenHarness/pull/208

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner