ETK-2026-3586Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-3586",
  "cve_id": null,
  "display_id": "ETK-2026-3586",
  "ghsa_id": "GHSA-p62c-7j9g-7598",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "MCP credential exposure in harnessrouter",
  "summary": "Self-hosted harnessrouter Docker images before 0.38.0 can expose configured remote MCP server URLs and credentials to agent turns through session-accessible files or process state. An attacker who can start a turn or influence an agent with untrusted content may cause the agent to obtain and reuse those credentials against the MCP server, including after the turn ends.",
  "mitigation": "Upgrade the harnessrouter Docker image to version 0.38.0 or later. Rotate MCP tokens after upgrading if untrusted users could start turns or agents processed untrusted content, because older sessions, checkpoints, and Git history may retain prior copies.",
  "vendor": "other",
  "product": "other:harnessrouter/harnessrouter (Docker image)",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "< 0.38.0"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "0.38.0"
      ],
      "package_name": "harnessrouter/harnessrouter (Docker image)",
      "purl": null
    }
  ],
  "cwes": [
    200
  ],
  "cvss_score": 7,
  "cvss_src": "ethiack_provisional",
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 13.539883766666666,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-11-04T07:40:13+00:00",
      "days": -1.2859041657291668,
      "is_lower_bound": true,
      "measured_at": "2026-11-05T14:31:55.168961+00:00",
      "url": "https://github.com/HarnessRouter/harnessrouter/security/advisories/GHSA-p62c-7j9g-7598"
    }
  }
}