An insecure default configuration in HKUDS OpenHarness permits unauthenticated attackers to bypass access controls and potentially access sensitive files.

The vulnerability stems from an incorrect default permission setting where remote channels are configured with an overly permissive allow list. This allows unauthenticated remote attackers to reach host-backed agent runtimes and perform unauthorized file disclosure.

This vulnerability poses a significant risk to data confidentiality, as it allows unauthorized parties to read sensitive information through agent runtimes. With a CVSS score of 8.2, this is a high-severity issue that could lead to widespread data exposure and potential regulatory non-compliance if left unaddressed.

Immediate Action: Update HKUDS OpenHarness to a version incorporating the remediation identified in PR #147 or upgrade to v0.1.7 or later.

Proactive Monitoring: Review access logs for unusual inbound connections to remote channels and monitor agent runtime activity for unauthorized read requests.

Compensating Controls: Implement network-level access control lists or a Web Application Firewall to restrict traffic to the affected channels to known, trusted IP addresses only.

Public Exploit Available: No (Exploit_available: false/unknown)

Given the high CVSS score and the existence of a proof-of-concept, organizations must prioritize patching this vulnerability immediately. Failure to restrict access to these channels exposes internal host environments to unauthorized inspection, which represents a critical security gap in any production deployment.