openharness-ai vulnerabilities
CVEs whose affected-version data names the openharness-ai package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-56695Medium· 6.5OpenHarness remote resume commands expose other users' saved session snapshots
OpenHarness remote resume commands expose other users' saved session snapshots
▾ Sunlitopenharness-ai · openharness-aiEPSS 0.40%via OSV
CVE-2026-56696Medium· 5.4OpenHarness remote project-context commands allow persistent prompt poisoning
OpenHarness remote project-context commands allow persistent prompt poisoning
▾ Sunlitopenharness-ai · openharness-aiEPSS 0.37%via OSV