Search
Find a vulnerability
Search criteria
4 vulnerabilities found for openhuman by tinyhumansai
CVE-2026-49410 (GCVE-0-2026-49410)
Vulnerability from nvd – Published: 2026-10-16 21:25 – Updated: 2026-10-16 21:25
VLAI
EPSS
VEX
Title
OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation
Summary
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth_handler consumes an attacker-supplied one-time Telegram login token and passes the returned JWT to credentials::ops::store_session without validating browser fetch metadata or the request origin. An attacker with an OpenHuman account can cause a user with the local core running to visit a malicious page that requests the /auth/telegram endpoint on loopback port 7788, switching the user's active local session to the attacker's backend account and exposing subsequent agent actions, memory writes, and Telegram messages associated with that session to the attacker. This issue is fixed in version 0.56.0.
Severity
8.1 (High)
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/tinyhumansai/openhuman/securit… | x_refsource_CONFIRM |
| https://github.com/tinyhumansai/openhuman/pull/2331 | x_refsource_MISC |
| https://github.com/tinyhumansai/openhuman/commit/… | x_refsource_MISC |
| https://github.com/tinyhumansai/openhuman/release… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| tinyhumansai | openhuman |
Affected:
< 0.56.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "openhuman",
"vendor": "tinyhumansai",
"versions": [
{
"status": "affected",
"version": "\u003c 0.56.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth_handler consumes an attacker-supplied one-time Telegram login token and passes the returned JWT to credentials::ops::store_session without validating browser fetch metadata or the request origin. An attacker with an OpenHuman account can cause a user with the local core running to visit a malicious page that requests the /auth/telegram endpoint on loopback port 7788, switching the user\u0027s active local session to the attacker\u0027s backend account and exposing subsequent agent actions, memory writes, and Telegram messages associated with that session to the attacker. This issue is fixed in version 0.56.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "CWE-352: Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "CWE-384: Session Fixation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T21:25:02.030Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-c4m9-hw7m-vv3m",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-c4m9-hw7m-vv3m"
},
{
"name": "https://github.com/tinyhumansai/openhuman/pull/2331",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/tinyhumansai/openhuman/pull/2331"
},
{
"name": "https://github.com/tinyhumansai/openhuman/commit/b1bbc53fceed7d1f0cff90cbb0a42f4ab8e153a1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/tinyhumansai/openhuman/commit/b1bbc53fceed7d1f0cff90cbb0a42f4ab8e153a1"
},
{
"name": "https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0"
}
],
"source": {
"advisory": "GHSA-c4m9-hw7m-vv3m",
"discovery": "UNKNOWN"
},
"title": "OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-49410",
"datePublished": "2026-10-16T21:25:02.030Z",
"dateReserved": "2026-05-29T19:08:01.257Z",
"dateUpdated": "2026-10-16T21:25:02.030Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-55743 (GCVE-0-2026-55743)
Vulnerability from nvd – Published: 2026-06-17 14:08 – Updated: 2026-08-10 11:44
VLAI
EPSS
VEX
Title
OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution
Summary
The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.
Severity
9.6 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-17 15:40 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/tinyhumansai/openhuman/commit/… | patch |
| https://github.com/tinyhumansai/openhuman/blob/v0… | technical-description |
| https://github.com/tinyhumansai/openhuman | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| tinyhumansai | OpenHuman |
Affected:
0 , ≤ 0.54.0
(semver)
|
Date Public
2026-06-17 14:08
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-55743",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-17T15:40:33.751475Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-17T15:40:47.796Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://github.com/tinyhumansai/openhuman",
"defaultStatus": "unaffected",
"platforms": [
"macOS",
"Windows",
"Linux"
],
"product": "OpenHuman",
"programFiles": [
"src/openhuman/security/policy.rs"
],
"programRoutines": [
{
"name": "is_args_safe"
},
{
"name": "skip_env_assignments"
}
],
"repo": "https://github.com/tinyhumansai/openhuman",
"vendor": "tinyhumansai",
"versions": [
{
"lessThanOrEqual": "0.54.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Bobur Abdugafforov"
},
{
"lang": "en",
"type": "analyst",
"value": "Zikrillayev Salohiddin"
}
],
"datePublic": "2026-06-17T14:08:33.726Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.\u003c/p\u003e"
}
],
"value": "The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-184",
"description": "CWE-184 Incomplete List of Disallowed Inputs",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-10T11:44:25.190Z",
"orgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c",
"shortName": "TuranSec"
},
"references": [
{
"name": "Fix commit (PR #2636): block find -execdir/-okdir",
"tags": [
"patch"
],
"url": "https://github.com/tinyhumansai/openhuman/commit/60050aa09a870f53ed7e4cd40ed41fd2860329e7"
},
{
"name": "Vulnerable source at v0.53.49-staging: src/openhuman/security/policy.rs",
"tags": [
"technical-description"
],
"url": "https://github.com/tinyhumansai/openhuman/blob/v0.53.49-staging/src/openhuman/security/policy.rs"
},
{
"tags": [
"product"
],
"url": "https://github.com/tinyhumansai/openhuman"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution"
}
},
"cveMetadata": {
"assignerOrgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c",
"assignerShortName": "TuranSec",
"cveId": "CVE-2026-55743",
"datePublished": "2026-06-17T14:08:33.726Z",
"dateReserved": "2026-06-17T12:59:17.621Z",
"dateUpdated": "2026-08-10T11:44:25.190Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-49410 (GCVE-0-2026-49410)
Vulnerability from cvelistv5 – Published: 2026-10-16 21:25 – Updated: 2026-10-16 21:25
VLAI
EPSS
VEX
Title
OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation
Summary
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth_handler consumes an attacker-supplied one-time Telegram login token and passes the returned JWT to credentials::ops::store_session without validating browser fetch metadata or the request origin. An attacker with an OpenHuman account can cause a user with the local core running to visit a malicious page that requests the /auth/telegram endpoint on loopback port 7788, switching the user's active local session to the attacker's backend account and exposing subsequent agent actions, memory writes, and Telegram messages associated with that session to the attacker. This issue is fixed in version 0.56.0.
Severity
8.1 (High)
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/tinyhumansai/openhuman/securit… | x_refsource_CONFIRM |
| https://github.com/tinyhumansai/openhuman/pull/2331 | x_refsource_MISC |
| https://github.com/tinyhumansai/openhuman/commit/… | x_refsource_MISC |
| https://github.com/tinyhumansai/openhuman/release… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| tinyhumansai | openhuman |
Affected:
< 0.56.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "openhuman",
"vendor": "tinyhumansai",
"versions": [
{
"status": "affected",
"version": "\u003c 0.56.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth_handler consumes an attacker-supplied one-time Telegram login token and passes the returned JWT to credentials::ops::store_session without validating browser fetch metadata or the request origin. An attacker with an OpenHuman account can cause a user with the local core running to visit a malicious page that requests the /auth/telegram endpoint on loopback port 7788, switching the user\u0027s active local session to the attacker\u0027s backend account and exposing subsequent agent actions, memory writes, and Telegram messages associated with that session to the attacker. This issue is fixed in version 0.56.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "CWE-352: Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "CWE-384: Session Fixation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-16T21:25:02.030Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-c4m9-hw7m-vv3m",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-c4m9-hw7m-vv3m"
},
{
"name": "https://github.com/tinyhumansai/openhuman/pull/2331",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/tinyhumansai/openhuman/pull/2331"
},
{
"name": "https://github.com/tinyhumansai/openhuman/commit/b1bbc53fceed7d1f0cff90cbb0a42f4ab8e153a1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/tinyhumansai/openhuman/commit/b1bbc53fceed7d1f0cff90cbb0a42f4ab8e153a1"
},
{
"name": "https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0"
}
],
"source": {
"advisory": "GHSA-c4m9-hw7m-vv3m",
"discovery": "UNKNOWN"
},
"title": "OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-49410",
"datePublished": "2026-10-16T21:25:02.030Z",
"dateReserved": "2026-05-29T19:08:01.257Z",
"dateUpdated": "2026-10-16T21:25:02.030Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-55743 (GCVE-0-2026-55743)
Vulnerability from cvelistv5 – Published: 2026-06-17 14:08 – Updated: 2026-08-10 11:44
VLAI
EPSS
VEX
Title
OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution
Summary
The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.
Severity
9.6 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-17 15:40 UTC
CWE
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/tinyhumansai/openhuman/commit/… | patch |
| https://github.com/tinyhumansai/openhuman/blob/v0… | technical-description |
| https://github.com/tinyhumansai/openhuman | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| tinyhumansai | OpenHuman |
Affected:
0 , ≤ 0.54.0
(semver)
|
Date Public
2026-06-17 14:08
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-55743",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-17T15:40:33.751475Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-17T15:40:47.796Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://github.com/tinyhumansai/openhuman",
"defaultStatus": "unaffected",
"platforms": [
"macOS",
"Windows",
"Linux"
],
"product": "OpenHuman",
"programFiles": [
"src/openhuman/security/policy.rs"
],
"programRoutines": [
{
"name": "is_args_safe"
},
{
"name": "skip_env_assignments"
}
],
"repo": "https://github.com/tinyhumansai/openhuman",
"vendor": "tinyhumansai",
"versions": [
{
"lessThanOrEqual": "0.54.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Bobur Abdugafforov"
},
{
"lang": "en",
"type": "analyst",
"value": "Zikrillayev Salohiddin"
}
],
"datePublic": "2026-06-17T14:08:33.726Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.\u003c/p\u003e"
}
],
"value": "The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-184",
"description": "CWE-184 Incomplete List of Disallowed Inputs",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-10T11:44:25.190Z",
"orgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c",
"shortName": "TuranSec"
},
"references": [
{
"name": "Fix commit (PR #2636): block find -execdir/-okdir",
"tags": [
"patch"
],
"url": "https://github.com/tinyhumansai/openhuman/commit/60050aa09a870f53ed7e4cd40ed41fd2860329e7"
},
{
"name": "Vulnerable source at v0.53.49-staging: src/openhuman/security/policy.rs",
"tags": [
"technical-description"
],
"url": "https://github.com/tinyhumansai/openhuman/blob/v0.53.49-staging/src/openhuman/security/policy.rs"
},
{
"tags": [
"product"
],
"url": "https://github.com/tinyhumansai/openhuman"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution"
}
},
"cveMetadata": {
"assignerOrgId": "309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c",
"assignerShortName": "TuranSec",
"cveId": "CVE-2026-55743",
"datePublished": "2026-06-17T14:08:33.726Z",
"dateReserved": "2026-06-17T12:59:17.621Z",
"dateUpdated": "2026-08-10T11:44:25.190Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}