{"metadata": {"vulnerability": "CVE-2026-125331", "count": 12, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 6}, "linked_omitted": 0}, "data": [{"timestamp": "2026-11-09T21:22:55.598Z", "date_only": false, "value": "2026-11-09T21:22:55.598Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-125331", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-10T18:38:44.546Z", "date_only": false, "value": "2026-11-10T18:38:44.546Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-125331", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-10T18:38:44.546Z", "date_only": false, "value": "2026-11-10T18:38:44.546Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-125331", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-10T19:21:10.630Z", "date_only": false, "value": "2026-11-10T19:21:10.630", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-125331", "record": "FKIE_CVE-2026-125331", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-10T20:10:14.230Z", "date_only": false, "value": "2026-11-10T20:10:14.230819Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzyapco7de2y", "record": "CVE-2026-125331", "field": "creation_timestamp", "uuid": "fe52db60-9b7e-406b-8102-51a6e04fd3bb", "content": "\ud83d\udea8 CVE-2026-125331 \u2014 CVSS 9.1 CRITICAL\n\nHarnessRouter is a self-hosted unified API for running agent harnesses with sessions, streaming, files, can...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-125331\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzyapco7de2y"}, {"timestamp": "2026-11-10T20:20:06.875Z", "date_only": false, "value": "2026-11-10T20:20:06.875588Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzybaxnl5f22", "record": "CVE-2026-125331", "field": "creation_timestamp", "uuid": "ae69d6b8-701f-424d-b93b-90859849c322", "content": "CVE-2026-125331 - harnessrouter\nIf you run HarnessRouter version before 0.31.8 in a multi-organization setup, an attacker can craft a fake authentication token and change another company's provider connection\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#harnessrouter #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzybaxnl5f22"}, {"timestamp": "2026-11-11T09:30:53.140Z", "date_only": false, "value": "2026-11-11T09:30:53.140286Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117597107172278328", "record": "CVE-2026-125331", "field": "creation_timestamp", "uuid": "2718d78c-90d2-4a77-ba97-07fc68fc9aa7", "content": "CVE-2026-125331 HarnessRouter: Service-only routes that write an organization's provider connections could be reached through a multi-tenant console with a made-up bearer HarnessRouter is a self-hosted unified API for running agent harnesses with sessions, streaming, files, cancellation, and failure handling. Prior to 0.31.8, a console that is not in self-hosted mode attaches the server's internal key to requests carrying an Authorization header before validating the bearer, while the service-only PUT and GET /v1/orgs/{org}/connections/{name}, PUT /v1/orgs/{org}/policy/{backend}, and /internal/* routes trust that key and take the organization from the URL. In a multi-organization deployment, a remote caller can use a made-up bearer to rewrite another organization's provider connection to an attacker-controlled endpoint, causing later prompts to be disclosed and attacker-controlled responses to influence tasks. This issue is fixed in version 0.31.8.\nhttps://www.cve.org/CVERecord?id=CVE-2026-125331https://github.com/HarnessRouter/harnessrouter/security/advisories/GHSA-p6cq-54cg-8mpvhttps://github.com/HarnessRouter/harnessrouter/pull/418https://github.com/HarnessRouter/harnessrouter/commit/28609ec65ed671112d7e5418926bbd3cb3b25c00https://github.com/HarnessRouter/harnessrouter/releases/tag/v0.31.8#HarnessRouter #harnessrouter#CVE_2026_125331#bot", "url": "https://infosec.exchange/users/cve/statuses/117597107172278328"}, {"timestamp": "2026-11-12T16:53:22.134Z", "date_only": false, "value": "2026-11-12T16:53:22.134138Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-125331", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-12T16:53:22.134Z", "date_only": false, "value": "2026-11-12T16:53:22.134138Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-125331", "record": "FKIE_CVE-2026-125331", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-12T18:02:28.023Z", "date_only": false, "value": "2026-11-12T18:02:28.023Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-125331", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-12T18:02:28.023Z", "date_only": false, "value": "2026-11-12T18:02:28.023Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-125331", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-12T22:18:51.470Z", "date_only": false, "value": "2026-11-12T22:18:51.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-125331", "record": "FKIE_CVE-2026-125331", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-14T13:02:42.820Z", "anchors": {"origin": {"timestamp": "2026-11-10T18:38:44.546Z", "date_only": false, "value": "2026-11-10T18:38:44.546Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-125331", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-10T18:38:44.546Z", "date_only": false, "value": "2026-11-10T18:38:44.546Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-125331", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 325438.274193, "hours": 90.39952060916666, "days": 3.766646692048611, "min_seconds": 325438.274193, "max_seconds": 325438.274193, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-10T18:38:44.546Z", "date_only": false, "value": "2026-11-10T18:38:44.546Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-125331", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T13:02:42.820Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}