A critical command injection vulnerability in HKUDS OpenHarness allows remote authenticated users to bypass authorization and execute administrative commands, posing a high risk of total system compromise.

The application fails to properly distinguish between local-only and remote-safe commands within the gateway handler (CWE-862). This allows a remote user with chat access to invoke administrative functions, such as unauthorized permission modification, without requiring elevated privileges.

The ability for a remote user to execute administrative commands results in a loss of integrity and control over the OpenHarness instance. With a CVSS score of 8.8, this flaw represents a high-severity risk that could lead to unauthorized privilege escalation, persistence mechanisms, or the disruption of critical gateway operations.

Immediate Action: Update your OpenHarness instance to commit dd1d235450dd987b20bff01b7bfb02fe8620a0af or later to resolve the command distinction flaw.

Proactive Monitoring: Review chat session logs for unexpected use of administrative commands or syntax patterns resembling system configuration changes.

Compensating Controls: Restrict access to the gateway handler via network-level controls or implement a Web Application Firewall (WAF) rule to filter and block unauthorized administrative command strings originating from chat interfaces.

Public Exploit Available: No

Given the potential for complete control over the application, it is imperative that administrators apply the provided fix immediately. Organizations should prioritize updating their environments to the patched commit to prevent unauthorized administrative actions and maintain the security integrity of the OpenHarness gateway.