HarnessRouter vulnerabilities
CVEs whose affected-version data names the HarnessRouter package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-114362Medium· 6.3HarnessRouter Targets Test Endpoint app.py server-side request forgery
A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation of the argument base_url can lead to server-side request f…
▾ Sunlitvia CVEORG
CVE-2026-114361Medium· 5.6HarnessRouter Identity Mode app.py improper authorization
A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py of the component Identity Mode. Performing a manipulation of the argument X-Harness-Org/X-Harness-Member results in …
▾ Sunlitvia CVEORG