Arbitrary Code Execution Vulnerability in OpenHarmony v5.0.3 and Earlier

CVE-2025-27577

What is CVE-2025-27577?

OpenHarmony versions v5.0.3 and earlier are susceptible to an arbitrary code execution vulnerability. This issue allows local attackers to exploit a race condition in the trusted computing base (TCB), potentially enabling them to execute arbitrary code with elevated privileges. As a result, the security assurances provided by the TCB can be compromised, allowing attackers to manipulate system operations and gain unauthorized access.

References