A critical remote code execution vulnerability in HKUDS OpenHarness allows authenticated attackers to gain full system-level access through the /bridge command interface.

This is an OS Command Injection (CWE-78) vulnerability occurring within the /bridge slash command. Authenticated users can provide malicious command text that is processed by the bridge session manager and executed via a shared shell subprocess, resulting in unauthorized command execution with the privileges of the OpenHarness process user.

The ability to execute arbitrary OS commands poses a severe risk to organizational security, as it allows attackers to compromise sensitive local files, extract credentials, and access internal repository contents. With a CVSS score of 8.8, this vulnerability represents a high-severity threat that could lead to full system compromise and significant data exfiltration, directly impacting the confidentiality, integrity, and availability of the affected infrastructure.

Immediate Action: Update to the latest version of OpenHarness beyond commit hash 438e373 or apply the vendor-provided patch immediately.

Proactive Monitoring: Monitor system logs for unusual shell subprocess activity, unexpected child processes spawned by the OpenHarness service, and unauthorized access attempts to sensitive configuration or credential files.

Compensating Controls: Implement strict network segmentation to limit access to the OpenHarness interface and utilize a Web Application Firewall (WAF) to inspect and block suspicious input patterns within slash commands.

Public Exploit Available: No (exploit_available: unknown)

Given the potential for remote code execution and the high CVSS severity rating, this vulnerability must be treated as a priority for remediation. Administrators should verify their current deployment version against the identified safe commit hash and apply updates immediately to prevent unauthorized system access.