CVE-2026-54145: high-severity vulnerability in tinyhumansai openhuman
OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.1%
OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected versions before 0.57.5, the approval gate uses the JSON-RPC bearer token as an approval session identifier. This exposes the credential through persisted approval records, events, debug logs, and RPC responses, including during normal desktop operation. An attacker who obtains these artifacts can recover the token and access the core RPC interface while it remains valid. This can expose sensitive agent and integration data and permit privileged operations. Stable tokens remain usable until rotated; launch-specific tokens remain usable while the corresponding core instance is active. The fix is included in version 0.57.5.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
tinyhumansai · openhumanRelated CVEs — tinyhumansai openhuman
In the same product, most dangerous first.
CVE-2026-54143CRITICALOpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command executionEPSS 1.2%CVE-2026-54141CRITICALOpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`EPSS 0.8%CVE-2026-54140HIGHOpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitizationEPSS 0.6%CVE-2026-54142HIGHOpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approvalEPSS 0.5%CVE-2026-54144MEDIUMOpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gestureEPSS 0.5%CVE-2026-49393HIGHOpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer tokenEPSS 0.3%