CVE-2026-56696
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Jun 23, 2026
Vendor
unknown
Description
OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/pr_comments.md files, which are subsequently injected into runtime system prompts, persistently influencing local agent behavior.