Permission Bypass in OpenHarness Affects Sensitive File Exposure

CVE-2026-40515

What is CVE-2026-40515?

A permission bypass vulnerability exists in OpenHarness where incomplete path normalization in the permission checker can be exploited by attackers. This flaw enables unauthorized access to sensitive files, allowing attackers to utilize built-in tools like grep and glob against root directories that do not adhere to set path rules. Consequently, this can lead to the exposure of sensitive local file content, key materials, configuration files, or directory listings, raising significant security concerns.

References