CVE-2026-40516

CVE-2026-40516 is a server-side request forgery (SSRF) vulnerability in OpenHarness versions prior to commit bd4df81 that affects the web_fetch and web_search tools. Attackers can manipulate tool parameters to bypass validation controls and access private HTTP services, including localhost endpoints, RFC1918 addresses, and cloud metadata services on the victim's network. The vulnerability carries a CVSS score of 8.3 (HIGH) with a network-based attack vector requiring no privileges or user interaction. The impact spans confidentiality, integrity, and availability domains, allowing attackers to read response bodies from local development services, administrative panels, and sensitive cloud endpoints accessible from the compromised host. There is no evidence of active exploitation in the wild. The vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog and shows minimal community attention with an EPSS score of 0.00047, indicating lower probability of exploitation compared to other published CVEs. Organizations using affected OpenHarness versions should prioritize patching to commit bd4df81 or later to prevent potential reconnaissance and data exfiltration attacks.