---
id: "CVE-2026-114361"
kind: "vulnerability"
aliases: ["CVE-2026-114361"]
title: "HarnessRouter: forged org headers bypass authorization in Identity Mode gateway"
severity: "medium"
cvss: 6.3
epss: 0.00319
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-gateway", "ai-tooling", "harnessrouter", "self-hosted"]
not_affected_if: ["default-config"]
published_at: "2026-10-21T19:17:00+00:00"
first_seen_at: "2026-10-23T21:57:29+00:00"
updated_at: "2026-10-25T04:01:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114361", "first_seen_at": "2026-10-23T21:57:29+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114361", "first_seen_at": "2026-10-24T13:15:54+00:00"}]
---

# HarnessRouter: forged org headers bypass authorization in Identity Mode gateway

HarnessRouter up to 0.31.10 trusts the X-Harness-Org and X-Harness-Member request headers in its Identity Mode gateway without proper checks. A remote attacker can manipulate these headers to get improper authorization.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed HarnessRouter version and whether it is 0.31.10 or earlier
- Check whether Identity Mode is enabled in the gateway configuration (unknown if the sources do not say how)

## Fix

- Upgrade HarnessRouter to `0.31.11` (patch `48a26cdf9c4544d2c88d1a07f0777f063f1d753f`)

## Timeline

- 2026-10-23T21:57:29+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114361
- 2026-10-24T13:15:54+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114361

## From the sources

A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py of the component Identity Mode. Performing a manipulation of the argument X-Harness-Org/X-Harness-Member results in improper authorization. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. Upgrading to version 0.31.11 mitigates this issue. The patch is named 48a26cdf9c4544d2c88d1a07f0777f063f1d753f. The affected component should be upgraded.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_