Product by Tinyhumansai

    OpenHuman

    12 known vulnerabilities in OpenHuman (Tinyhumansai), 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OpenHuman (Tinyhumansai)
    CriticalCVE-2026-54143

    OpenHuman: OS Command Injection

    		9.8
    CriticalCVE-2026-54141

    OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`

    		9.0
    HighCVE-2026-54142

    OpenHuman: security vulnerability

    		8.7
    HighCVE-2026-54140

    OpenHuman: security vulnerability

    		8.3
    HighCVE-2026-49393

    OpenHuman: Authentication Bypass Using an Alternate Path or Channel

    		8.4
    CriticalCVE-2026-55743

    OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution

    		9.6
    HighCVE-2026-54146

    OpenHuman: Cleartext Storage of Sensitive Information in an Environment Variable

    		8.8
    MediumCVE-2026-54144

    OpenHuman: Exposure of Private Personal Information to an Unauthorized Actor

    		6.1
    HighCVE-2026-54145

    OpenHuman: Cleartext Storage of Sensitive Information

    		8.8
    HighCVE-2026-49407

    OpenHuman: Missing Authentication for Critical Function

    		7.7
    HighCVE-2026-49410

    OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation

    		8.1
    MediumCVE-2026-49405

    OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event data

    		6.2

    News

    All products by Tinyhumansai