Read the docs

holaboss-ai

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

holaboss-ai records in CISA KEV

No holaboss-ai vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74428 CVE-2026-110769

Missing authorization in holaOS channel connectors allows agent tasks

Priority HIGH 75

holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform user to submit agent tasks because the #isAllowed check accepts all senders when t…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00292 Published 2026-10-14 No fix listed CWE-1188
TI-2026-74427 CVE-2026-110768

Authorization bypass in holaOS Telegram connector trusts usernames

Priority MEDIUM 61

holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0022 Published 2026-10-14 No fix listed CWE-290
Open these records in search →