Skip to content
Tinyhumansai Openhuman vulnerabilities
-
tinyhumansai openhuman
OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growth
CVE-2026-49407
7.7 High
-
tinyhumansai openhuman
OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approval
CVE-2026-54142
8.7 High
-
tinyhumansai openhuman
OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)
CVE-2026-54146
8.8 High
-
tinyhumansai openhuman
OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution
CVE-2026-54143
9.8 Critical
-
tinyhumansai openhuman
OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`
CVE-2026-54141
9.0 Critical
-
tinyhumansai openhuman
OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer token
CVE-2026-49393
8.4 High
-
tinyhumansai openhuman
OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)
CVE-2026-54145
8.8 High
-
tinyhumansai openhuman
OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event data
CVE-2026-49405
6.2 Medium
-
tinyhumansai openhuman
OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gesture
CVE-2026-54144
6.1 Medium
-
tinyhumansai openhuman
OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitization
CVE-2026-54140
8.3 High
-
tinyhumansai openhuman
OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation
CVE-2026-49410
8.1 High
-
tinyhumansai openhuman
OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution
CVE-2026-55743
9.4 Critical