CVE record · 1 source
CVE-2026-54145
CVSS 8.8OpenHuman is an open-source agent harness available as a desktop application and Rust library.
- Vendor
- Tinyhumansai
- Product
- openhuman
- CVSS v3.1
- 8.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weakness
- CWE-200, CWE-312, CWE-532
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
OpenHuman is an open-source agent harness available as a desktop application and Rust library.
OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected versions before 0.57.5, the approval gate uses the JSON-RPC bearer token as an approval session identifier. This exposes…