Description
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | v5.0.1 – ≤ v5.0.3 | — |
Low · 3.3
CVE-2025-26693
EUVD-2025-17389GHSA-mj5v-92gq-pg5q
security_access_token has an improper preservation of permissions vulnerability
Published Jun 8, 2025 · Updated Jun 9, 2025 · Assigned by OpenHarmony