CVE-2026-40516 | HKUDS OpenHarness HTTP Service web_fetch/web_search server-side request forgery

A vulnerability categorized as critical has been discovered in HKUDS OpenHarness. This vulnerability affects the function web_fetch/web_search of the component HTTP Service. The manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-40516. The attack can be executed remotely. There is not any exploit available.

It is best practice to apply a patch to resolve this issue.