Tinyhumansai Openhuman
12 CVEs affecting Tinyhumansai Openhuman. Latest disclosed: 2026-11-05. Critical: 3, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-54143 | Critical | 9.8 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.13, an attacker who can send messages to a c… |
CVE-2026-55743 | Critical | 9.6 | 2026-06-17 | The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execut… |
CVE-2026-54141 | Critical | 9.0 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, a remote direct message received through a confi… |
CVE-2026-54146 | High | 8.8 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. From 0.53.15 before 0.57.5 on macOS, core_process.rs in the Taur… |
CVE-2026-54145 | High | 8.8 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected versions before 0.57.5, the approval gate uses the J… |
CVE-2026-54142 | High | 8.7 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, background synchronization for connected service… |
CVE-2026-49393 | High | 8.4 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the core server protects HTTP POST requests to /r… |
CVE-2026-54140 | High | 8.3 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, OpenHuman places names, descriptions, titles, an… |
CVE-2026-49410 | High | 8.1 | 2026-10-16 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against… |
CVE-2026-49407 | High | 7.7 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.44, its local /ws/dictation WebSocket endp… |
CVE-2026-49405 | Medium | 6.2 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the local server exposes the server-sent events e… |
CVE-2026-54144 | Medium | 6.1 | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0 on macOS, the runtime injected into a supported re… |