CVE-2026-40502
Missing authorization in Hkuds Openharness
CVSS score
8.8
EPSS probability
%2.1
Risk score
0.2
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
https://github.com/HKUDS/OpenHarness/pull/127
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2026-61808
LightRAG: Missing Authentication for Critical API Functions in Default Configuration
H
Patch status unknown Public Exploits:1EPSS %2
5.3
CVE-2026-19243
HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection
H
Patch verifiedEPSS %2
9.3
CVE-2026-86124
AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server
H
Patch status unknownEPSS %1
6.9
CVE-2026-102874
HKUDS AnyTool Execute Endpoint main.py subprocess.run os command injection
H
Patch status unknownEPSS %1
9.2
CVE-2026-92576
HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool
H
Patch status unknownEPSS %0
6.9
CVE-2026-90809
HKUDS nanobot ExecTool shell.py ExecTool._spawn argument injection
H
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-40502"