https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T02:21:49.682891+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336924 EUVD-2026-336924 2026-10-17T02:21:49.685664+00:00 EUVD-2026-336924 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56696 fkie_cve-2026-56696 2026-10-17T02:21:49.685694+00:00

OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/pr_comments.md files, which are subsequently injected into runtime system prompts, persistently influencing local agent behavior.

 https://cve.radiocsirt.org/vuln/ghsa-24cw-228q-3rx9 GHSA-24cw-228q-3rx9 — OpenHarness remote project-context commands allow persistent prompt poisoning 2026-10-17T02:21:49.685725+00:00

Affected: PyPI: openharness-ai

OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/pr_comments.md files, which are subsequently injected into runtime system prompts, persistently influencing local agent behavior.

 https://cve.radiocsirt.org/vuln/pysec-2026-3880 PYSEC-2026-3880 — OpenHarness remote project-context commands allow persistent prompt poisoning 2026-10-17T02:21:49.685749+00:00

Affected: PyPI: openharness-ai

OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/pr_comments.md files, which are subsequently injected into runtime system prompts, persistently influencing local agent behavior.