CVE-2026-55743

CRITICAL 9.6

OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution

CVSS Score

9.6

EPSS Score

0.0%

EPSS Percentile

0th

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.

CWE	CWE-78 CWE-184
Vendor	tinyhumansai
Product	openhuman
Published	Jun 17, 2026
Last Updated	Aug 10, 2026

Stay Ahead of the Next One

Get instant alerts for tinyhumansai openhuman

Be the first to know when new critical vulnerabilities affecting tinyhumansai openhuman are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

tinyhumansai / OpenHuman

0 ≤ 0.54.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/tinyhumansai/openhuman/commit/60050aa09a870f53ed7e4cd40ed41fd2860329e7 github.com: https://github.com/tinyhumansai/openhuman/blob/v0.53.49-staging/src/openhuman/security/policy.rs github.com: https://github.com/tinyhumansai/openhuman

Credits

Bobur Abdugafforov Zikrillayev Salohiddin