CVE-2026-92750
Harness through 3.3.0 Missing Access Control via infraproviders endpoint
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated users to retrieve provider configurations from spaces they do not belong to. Attackers can query the GET /api/v1/infraproviders endpoint with arbitrary space identifiers to expose sensitive provider metadata including Docker endpoints, TLS certificate paths, and cloud project identifiers.
| CWE | CWE-862 |
| Vendor | harness |
| Product | harness |
| Published | Sep 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for harness harness
Be the first to know when new medium vulnerabilities affecting harness harness are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
harness / harness
0 ≤ 3.3.0
References
github.com: https://github.com/harness/harness/issues/3697 github.com: https://github.com/harness/harness github.com: https://github.com/harness/harness/blob/v3.3.0/app/api/controller/infraprovider/find.go#L25-L41 github.com: https://github.com/harness/harness/blob/v3.3.0/app/api/controller/infraprovider/list.go#L37 vulncheck.com: https://www.vulncheck.com/advisories/harness-through-3.3.0-missing-access-control-via-infraproviders-endpoint
Credits
George Chen