CVE-2026-27648

High

Published: 19/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

OpenHarmony v6.0 and prior versions have a vulnerability that allows a remote attacker to execute arbitrary code in pre-installed apps.

An attacker could exploit this vulnerability to gain control over the system, potentially leading to data loss or privacy breaches.

It is recommended to update to the latest version of OpenHarmony to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.