CNNVD-202602-1231 Information

Feb 08, 2026 cve

CNNVD ID

CNNVD-202602-1231

CVE-2026-2131

CNNVD Published: 2026-02-08

Description (Chinese)

Huawei HarmonyOS是中国华为（Huawei）公司的一个操作系统。提供一个基于微内核的全场景分布式操作系统。 Huawei HarmonyOS 0.1.0版本存在操作系统命令注入漏洞，该漏洞源于对函数input_text的参数text的错误操作，可能导致os命令注入。

Description (English)

Huawei HarmonyOS is an operating system of Huawei China. Provide a global scenario distribution operating system based on microkernels. Version 0.1.0 of Huawei HarmonyOS contains a bug in the operating system command that results from an error in the parameter text of function input text, which may lead to an Os command injection.

Hazard Level

High

Vulnerability Type

操作系统命令注入

Affected Vendor

华为

Published

2026-02-08

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.344766 https://vuldb.com/?submit.747209 https://github.com/scanleale/MCP_sec/blob/main/HarmonyOS-mcp-server%20RCE%20vulnerability.md https://vuldb.com/?id.344766 https://access.redhat.com/security/cve/cve-2026-2131

Share on: