Arbitrary Code Execution Vulnerability in OpenHarmony by OpenHarmony
CVE-2025-25277

6.3MEDIUM

Key Information:

Vendor

Openharmony

Status
Openharmony
Vendor
CVE Published:
16 March 2026

What is CVE-2025-25277?

A vulnerability exists in OpenHarmony versions up to v5.1.0, where a local attacker can execute arbitrary code in pre-installed applications due to an incompatible type. This issue can be exploited in specific scenarios, potentially leading to unauthorized actions within the system.

Affected Version(s)

OpenHarmony v5.0.3

References

https://gitcode.com/openharmony/security/tree/master/zh/s...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.