All 2 CVE vulnerabilities found in OpenHuman, with AI-generated Chinese analysis, references, and POCs.
Vendor: tinyhumansai
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-49410 | OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation CWE-352 | 8.1 | High | 2026-10-16 |
| CVE-2026-55743 | OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution CWE-78 | 9.6 | Critical | 2026-06-17 |
All 2 known CVE vulnerabilities affecting OpenHuman with full Chinese analysis, references, and POCs where available.