Description
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | v5.0.1 – ≤ v5.0.3 | — |
Low · 3.3
CVE-2025-27563
EUVD-2025-17388GHSA-9x6m-493j-h4m7
security_access_token has an improper preservation of permissions vulnerability
Published Jun 8, 2025 · Updated Jun 9, 2025 · Assigned by OpenHarmony