Skip to content
OpenAdvisories

Vendor

harness

2 known vulnerabilities.

Products

harness 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-92750

    Harness through 3.3.0 Missing Access Control via infraproviders endpoint

    Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated users to retrieve provider configurations from spaces they do not belong to. Attackers can query the GET /api/v1/infraproviders endpoint…

    harness harness