HarnessRouter: Improper authorization in internal-only routes via relayed bearer

Summary

A console proxy that is not in self-hosted mode forwards the internal key on requests that carry a bearer token, before the token is verified. Internal-only routes accepted the key alone, so a remote caller with a made-up bearer token in a multi-organization deployment can rewrite another organization's provider connection to an attacker-controlled endpoint. Later prompts can then be disclosed and attacker-controlled responses can influence tasks.

Affected

• HarnessRouter versions prior to 0.31.8
• Relevant mainly for multi-organization deployments behind a console that is not in self-hosted mode
• Per the release notes, a default self-hosted install was not affected

Fixed in

• Fixed in 0.31.8 (commit 28609ec65ed671112d7e5418926bbd3cb3b25c00)
• Note: later HarnessRouter CVEs exist (CVE-2026-114362 fixed in 0.31.13, CVE-2026-114361 reported up to 0.31.10); use the latest release

Workaround

• No vendor workaround documented
• Interim measure: block external access to the console and to /internal/ and organization-management routes at the reverse proxy or firewall until the upgrade is done

Exploitation

• No reports of exploitation in the wild found at the time of writing
• No CISA KEV listing found; no public proof of concept found
• Status is not a confirmed negative; check CISA KEV and the GHSA page

Our recommendation

• Upgrade to the latest HarnessRouter release, not only 0.31.8
• Check whether you run a multi-organization deployment behind a console reachable from the internet; if so, treat as high priority
• Until upgraded, block external access to the console and internal routes
• Review provider connection and policy settings for unexpected endpoints
• Monitor for unexpected changes to connections or policies

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• Fix commit 28609ec github.com
• Fix pull request #418 github.com
• Release v0.31.8 github.com
• GitHub Security Advisory GHSA-p6cq-54cg-8mpv github.com

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 10 Nov 2026, 20:46.