Vulnerabilities

TI-2026-85524 CVE-2026-49407

OpenHuman dictation WebSocket lacks authentication and origin checks

LOW 33

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00292 Published 2026-11-05 Fixed in 0.57.44 CWE-306

TI-2026-85521 CVE-2026-54142

Prompt injection in OpenHuman background sync runs Composio actions

HIGH 73

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00524 Published 2026-11-05 Fixed in 0.57.13 CWE-1427

TI-2026-85523 CVE-2026-54146

OpenHuman bearer token leak via process environment variable on macOS

LOW 37

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00213 Published 2026-11-05 Fixed in 0.57.5 CWE-526

TI-2026-85522 CVE-2026-54143

OpenHuman lets channel messages create unapproved shell cron jobs

MEDIUM 44

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2026-11-05 Fixed in 0.57.13 CWE-285

TI-2026-85516 CVE-2026-54141

OpenHuman Yuanbao channel bypasses approval for node_exec commands

MEDIUM 40

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00762 Published 2026-11-05 Fixed in 0.57.13 CWE-862

TI-2026-85514 CVE-2026-49393

Socket.IO RPC in OpenHuman skips authentication checks

LOW 36

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00299 Published 2026-11-05 Fixed in 0.56.0 CWE-288

TI-2026-85517 CVE-2026-54145

Bearer token leaked through approval gate session identifier in OpenHuman

LOW 37

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00086 Published 2026-11-05 Fixed in 0.57.5 CWE-200

TI-2026-85515 CVE-2026-49405

OpenHuman event stream endpoint leaks user-facing data without authentication

MEDIUM 61

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00254 Published 2026-11-05 Fixed in 0.56.0 CWE-200

TI-2026-85496 CVE-2026-54144

OpenHuman webview lets pages capture the macOS desktop silently

LOW 28

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2026-11-05 Fixed in 0.56.0 CWE-285

TI-2026-85495 CVE-2026-54140

Prompt injection in OpenHuman through MCP tool descriptions

LOW 37

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00554 Published 2026-11-05 Fixed in 0.57.13 CWE-1427

TI-2026-75524 CVE-2026-49410

OpenHuman Telegram login callback lets attackers swap user sessions

HIGH 70

OpenHuman is an open-source agent harness available as a desktop application and Rust library.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00191 Published 2026-10-16 Fixed in 0.56.0 CWE-352

TI-2026-40241 CVE-2026-55743 · GHSA-34j2-gcwp-vrv5

OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution

MEDIUM 43

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop us…

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.00388 Published 2026-06-17 No fix listed CWE-184

Vulnerabilities

Filters