CVE-2026-56696 — OpenHarness - Prompt Injection via /issue and /pr_comments Slash Commands
OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project con…
Published: 2026-06-23 · CVSS: 5.3 · CVSS 4.0
OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/pr_comments.md files, which are subsequently injected into runtime system prompts, persistently influencing local agent behavior.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7