OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

OpenHuman is an open-source agent harness available as a desktop application and Rust library. In affected versions before 0.57.5, the approval gate uses the JSON-RPC bearer token as an approval session identifier. This exposes the credential through persisted approval records, events, debug logs, and RPC responses, including during normal desktop operation. An attacker who obtains these artifacts can recover the token and access the core RPC interface while it remains valid. This can expose sensitive agent and integration data and permit privileged operations. Stable tokens remain usable until rotated; launch-specific tokens remain usable while the corresponding core instance is active. The fix is included in version 0.57.5.

Etkilenen sürümler1 yazılım

Kaynaklar6 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…nhuman/security/advisories/GHSA-ww8p-c82p-p8wx Diğer
• github.com/tinyhumansai/openhuman/pull/2952 Diğer
• github.com/…ommit/c5ff4a3516a9ad889b19a97eb1bba624908658fe Diğer
• github.com/tinyhumansai/openhuman/releases/tag/v0.57.5 Diğer

Kayıt geçmişi

1. 5 Kas 2026 19:33Yayımlandı

İlgili açıklar

• 7,7 CVE-2026-49407OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growth
• 8,7 CVE-2026-54142OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approval
• 8,8 CVE-2026-54146OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)
• 9,8 CVE-2026-54143OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution
• 9,0 CVE-2026-54141OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`
• 8,4 CVE-2026-49393OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer token