in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.