CVE-2026-49407highCWE-306CWE-400CWE-770

CVE-2026-49407: fallo de gravedad alta en tinyhumansai openhuman

OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growth

Publicada el

Seguir esta CVE+ Monitorear openhuman

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.7epss 0.3%
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.44, its local  /ws/dictation  WebSocket endpoint lacks client authentication and browser-origin validation. An unauthenticated client, including a malicious web page able to reach the endpoint, can submit audio and trigger resource-intensive speech-to-text processing. Earlier affected versions also accumulate audio in an unbounded buffer, allowing continuous streaming to exhaust process memory. These conditions can degrade performance, exhaust resources, or crash the application. This issue is fixed in version 0.57.44.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Productos afectados
tinyhumansai · openhuman
CVEs relacionadas — tinyhumansai openhuman

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-54143CRITICALOpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command executionEPSS 1.2%CVE-2026-54141CRITICALOpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`EPSS 0.8%CVE-2026-54140HIGHOpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitizationEPSS 0.6%CVE-2026-54142HIGHOpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approvalEPSS 0.5%CVE-2026-54144MEDIUMOpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gestureEPSS 0.5%CVE-2026-49393HIGHOpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer tokenEPSS 0.3%