Vendor

HKUDS

2 briefs RSS

HKUDS OpenHarness Remote Code Execution via /bridge Slash Command (CVE-2026-7551)

HKUDS OpenHarness contains a remote code execution vulnerability (CVE-2026-7551) in the /bridge slash command, allowing remote attackers to execute arbitrary operating system commands by injecting malicious commands via the /bridge spawn command, leading to unauthorized shell access and data exposure.

OpenHarness rce vulnerability injection

2r 1t 1c Apr 30, 2026

critical advisory

HKUDS OpenHarness Plugin Management Vulnerability (CVE-2026-6819)

2 rules 3 TTPs 1 CVE

HKUDS OpenHarness before PR #156 allows remote attackers with channel layer access to manage plugin lifecycle commands, enabling unauthorized plugin installation and activation.

OpenHarness cve-2026-6819 plugin-vulnerability remote-code-execution

2r 3t 1c Jan 3, 2024