Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

tinyhumansai openhuman güvenlik açıkları

tinyhumansai

tinyhumansai openhuman için bildirim al RSS

Toplam açık
10
Kritik
2
Aktif istismar
0
Yaması çıkan
9
Son açık
1 sa önce
Önem dağılımı
  • Kritik 2
  • Yüksek 6
  • Orta 2
  • Düşük 0

Son açıklar

10 açık

  1. 7,7Yüksek CVE-2026-49407Yama var OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growth tinyhumansai openhumanCWE-3061 sa önce
  2. 8,7Yüksek CVE-2026-54142Yama var OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approval tinyhumansai openhumanCWE-14272 sa önce
  3. 8,8Yüksek CVE-2026-54146 OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive) tinyhumansai openhumanCWE-5262 sa önce
  4. 9,8Kritik CVE-2026-54143Yama var OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution tinyhumansai openhumanCWE-782 sa önce
  5. 9,0Kritik CVE-2026-54141Yama var OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec` tinyhumansai openhumanCWE-942 sa önce
  6. 8,4Yüksek CVE-2026-49393Yama var OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer token tinyhumansai openhumanCWE-2882 sa önce
  7. 8,8Yüksek CVE-2026-54145Yama var OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response) tinyhumansai openhumanCWE-2002 sa önce
  8. 6,2Orta CVE-2026-49405Yama var OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event data tinyhumansai openhumanCWE-2002 sa önce
  9. 6,1Orta CVE-2026-54144Yama var OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gesture tinyhumansai openhumanCWE-2852 sa önce
  10. 8,3Yüksek CVE-2026-54140Yama var OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitization tinyhumansai openhumanCWE-14272 sa önce