ETK-2026-3566Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-3566",
  "cve_id": null,
  "display_id": "ETK-2026-3566",
  "ghsa_id": "GHSA-xg9p-cfwv-2gm9",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "MySQL/MariaDB local file disclosure in HarnessRouter",
  "summary": "HarnessRouter Docker images before 0.37.16 can disclose files readable by the gateway process when callers use affected MySQL or MariaDB database routes. An attacker who has API key or console access and can direct a connection to a database server they control may obtain environment data or other gateway-readable files.",
  "mitigation": "Upgrade the HarnessRouter Docker image to 0.37.16 or later. If untrusted users may have reached the affected routes, rotate gateway, console, provider, database, MCP server, and plugin credentials.",
  "vendor": "other",
  "product": "other:harnessrouter/harnessrouter (Docker image)",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0.4.2, < 0.37.16"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "0.37.16"
      ],
      "package_name": "harnessrouter/harnessrouter (Docker image)",
      "purl": null
    }
  ],
  "cwes": [
    73
  ],
  "cvss_score": 9,
  "cvss_src": "ethiack_provisional",
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 18.25710345,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-11-04T00:51:38+00:00",
      "days": -1.0790261501851852,
      "is_lower_bound": true,
      "measured_at": "2026-11-05T02:45:25.926191+00:00",
      "url": "https://github.com/HarnessRouter/harnessrouter/security/advisories/GHSA-xg9p-cfwv-2gm9"
    }
  }
}