{"id":"CVE-2026-114361","kind":"vulnerability","aliases":["CVE-2026-114361"],"related":[],"title":"HarnessRouter: forged org headers bypass authorization in Identity Mode gateway","description":"A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py of the component Identity Mode. Performing a manipulation of the argument X-Harness-Org/X-Harness-Member results in improper authorization. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. Upgrading to version 0.31.11 mitigates this issue. The patch is named 48a26cdf9c4544d2c88d1a07f0777f063f1d753f. The affected component should be upgraded.","summary":"HarnessRouter up to 0.31.10 trusts the X-Harness-Org and X-Harness-Member request headers in its Identity Mode gateway without proper checks. A remote attacker can manipulate these headers to get improper authorization.","severity":"medium","cvss":6.3,"epss":0.00319,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-gateway","ai-tooling","harnessrouter","self-hosted"],"not_affected_if":["default-config"],"how_to_check":"- Check the installed HarnessRouter version and whether it is 0.31.10 or earlier\n- Check whether Identity Mode is enabled in the gateway configuration (unknown if the sources do not say how)","fix":"- Upgrade HarnessRouter to `0.31.11` (patch `48a26cdf9c4544d2c88d1a07f0777f063f1d753f`)","status":"open","published_at":"2026-10-21T19:17:00+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","triaged_at":"2026-10-25T04:01:19+00:00","updated_at":"2026-10-25T04:01:19+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-25T04:01:19Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade HarnessRouter to `0.31.11` (patch `48a26cdf9c4544d2c88d1a07f0777f063f1d753f`)","reach":"internet","title":"HarnessRouter: forged org headers bypass authorization in Identity Mode gateway","impact":"medium","summary":"HarnessRouter up to 0.31.10 trusts the X-Harness-Org and X-Harness-Member request headers in its Identity Mode gateway without proper checks. A remote attacker can manipulate these headers to get improper authorization.","category":"ai-tooling","nicknames":[],"who_cares":["harnessrouter","ai-gateway","self-hosted"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker reaches resources of other organizations through forged headers","analyst_note":"","how_to_check":"- Check the installed HarnessRouter version and whether it is 0.31.10 or earlier\n- Check whether Identity Mode is enabled in the gateway configuration (unknown if the sources do not say how)","needs_analyst":false,"not_affected_if":["default-config"],"who_is_affected":"Teams running HarnessRouter 0.31.10 or earlier with Identity Mode enabled, where the gateway accepts the X-Harness-Org and X-Harness-Member headers from clients. Deployments that do not use Identity Mode are likely not exposed, though the sources do not confirm this.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000612,"input_tokens":3445,"output_tokens":536,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114361':13A,16A '-2026':12A,15A '/x-harness-member':96C '0.31.10':30B,71C '0.31.11':127C '48a26cdf9c4544d2c88d1a07f0777f063f1d753f':135C 'affect':73C,137C 'ai':18B,21B 'ai-gateway':17B 'ai-tool':20B 'argument':91C 'attack':54B,102C,111C 'author':6A,62B,100C 'bypass':5A 'carri':107C 'check':51B 'complex':117C 'compon':83C,138C 'consid':113C 'cve':11A,14A 'detect':66C 'difficult':123C 'exploit':119C 'file':79C 'forg':2A 'function':76C 'gateway':10A,19B,48B 'gateway/app.py':80C 'get':60B 'har':35B,40B,94C 'harnessrout':1A,23B,27B,68C 'header':4A,43B,58B 'high':116C 'host':26B 'ident':8A,46B,84C 'improp':61B,99C 'issu':130C 'manipul':56B,88C 'member':41B 'mitig':128C 'mode':9A,47B,85C 'name':134C 'org':3A,36B,95C 'patch':132C 'perform':86C 'possibl':104C 'proper':50B 'remot':53B,109C 'report':121C 'request':42B 'result':97C 'self':25B 'self-host':24B 'tool':22B 'trust':31B 'unknown':75C 'upgrad':124C,141C 'version':126C 'vulner':64C 'without':49B 'x':34B,39B,93C 'x-harness-memb':38B 'x-harness-org':33B,92C","nicknames":[],"mitigations":[],"who_affected":"Teams running HarnessRouter 0.31.10 or earlier with Identity Mode enabled, where the gateway accepts the X-Harness-Org and X-Harness-Member headers from clients. Deployments that do not use Identity Mode are likely not exposed, though the sources do not confirm this.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T19:17:00+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114361","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114361","severity":null,"published_at":"2026-10-21T19:17:00+00:00","modified_at":"2026-10-23T15:17:25+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114361","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114361","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:54+00:00","fetched_at":"2026-10-24T13:15:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}