The vulnerability is an identity authentication bypass in the HarmonyOS window module. Successful exploitation may allow a malicious actor to bypass authentication controls and potentially compromise the confidentiality of the service. This flaw is identified as a leakage of information (CWE‑200).

The affected product is Huawei HarmonyOS, specifically version 6.0.0. The CPE indicates that the flaw applies to the HarmonyOS operating system at that release.

The CVSS score of 5.9 indicates a moderate severity vulnerability. The EPSS score of less than 1% suggests a very low probability of exploitation. The vulnerability is not listed in CISA's KEV catalog. The attack vector is not explicitly described in the CVE, but the nature of the flaw—as an identity authentication bypass within the window module—implies that an attacker may need local access or user interaction on the device to exploit it. The primary impact is on service confidentiality.