Information Leak Vulnerability in OpenHarmony Versions Prior to 5.0.3

CVE-2025-26691

What is CVE-2025-26691?

A vulnerability in OpenHarmony versions prior to 5.0.3 allows local attackers to exploit the system by causing an information leak through incorrect handling of permission retrieval mechanisms. This flaw can potentially expose sensitive data, thereby increasing the risk of unauthorized information access. It highlights the importance of stringent security practices and timely updates to safeguard against such threats.

References