tinyhumansai openhuman vulnerabilities and fixes
Exploited and high-severity tinyhumansai openhuman vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.8CVE-2026-54146OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)Verify fixtinyhumansai openhuman
1 min read - 8.7CVE-2026-54142OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approvalVerify fixtinyhumansai openhuman
1 min read - 9.8CVE-2026-54143OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command executionRCEVerify fixtinyhumansai openhuman
1 min read - 7.7CVE-2026-49407OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growthVerify fixtinyhumansai openhuman
1 min read - 9.0CVE-2026-54141OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`RCEVerify fixtinyhumansai openhuman
1 min read - 8.4CVE-2026-49393OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer tokenVerify fixtinyhumansai openhuman
1 min read - 8.8CVE-2026-54145OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)Verify fixtinyhumansai openhuman
1 min read - 8.3CVE-2026-54140OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitizationVerify fixtinyhumansai openhuman
1 min read