CVE-2026-40503

OpenHarness prior to commit dd1d235 contains a path traversal vulnerability in the /memory show slash command that enables remote gateway users with chat access to read arbitrary files from the system. By supplying path traversal sequences in the path input parameter, attackers can escape the project memory directory and access sensitive files accessible to the OpenHarness process, provided the system lacks filesystem containment validation. The vulnerability has a CVSS severity score of 6.5 (Medium) with a network attack vector, low attack complexity, and requirement for low privileges (user authentication). The primary impact is confidentiality, allowing unauthorized disclosure of sensitive information, while integrity and availability remain unaffected. The EPSS score of 0.00018 indicates this vulnerability is less frequently observed in the wild compared to other disclosed CVEs. This vulnerability is not currently listed on CISA's Known Exploited Vulnerabilities catalog and shows no signs of active exploitation. The vulnerability does not appear to be on any hot lists monitored by the security community, and there is no widely available public exploit code. Organizations using OpenHarness should prioritize upgrading to the patched version at commit dd1d235 or later as part of regular maintenance activities.