CVE-2026-114361 | HarnessRouter up to 0.31.10 Identity Mode gateway/app.py X-Harness-Org/X-Harness-Member improper authorization (GHSA-qrr8-m92f-7vfp)

October 21, 2026 Yanac

A vulnerability has been found in HarnessRouter up to 0.31.10 and classified as problematic. This affects an unknown function of the file gateway/app.py of the component Identity Mode. Performing a manipulation of the argument X-Harness-Org/X-Harness-Member results in improper authorization.

This vulnerability is reported as CVE-2026-114361. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More