by Kastro
Paper/Archive/CVE-2026-55743

CVE-2026-55743

tinyhumansai OpenHuman — OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution

EPSS 0.4%CVSS 9.6
critical.is priorityof 100
35
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 33.0.330 × 206.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.

Affected

ProductAffectedFixed inSource
OpenHuman≤ 0.54.0–CNA

Scores by source

TuranSec (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
TuranSec (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchgithub.com/tinyhumansai/openhuman/commit/60050aa09a870f53ed7e4cd40ed41fd2860329e7writeupgithub.com/tinyhumansai/openhuman/blob/v0.53.49-staging/src/openhuman/security/policy.rsrefgithub.com/tinyhumansai/openhuman