Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.13, an attacker who can send messages to a configured external channel can cause the agent to create persistent shell cron jobs without human approval. The scheduler later executes these jobs with the privileges of the OpenHuman runtime user. Command validation also permits leading environment assignments that can redirect allowed commands to executable helpers. The demonstrated exploit requires a suitable helper executable already present on the host. This can lead to unauthorized persistent command execution and compromise data and resources accessible to OpenHuman. This issue is fixed in version 0.57.13.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
🆕 New CVEs tinyhumansai openhuman: 2 critical CVEs Worst: remote command execution via inbound channel cron jobs (CVE-2026-54143) Patch → 0.57.13 https://cve.now/CVE-2026-54143?release=CVE-2026-54141&utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=rollup
🚨Critical - OpenHuman Approval Bypass RCE (CVE-2026-54141, CVE-2026-54143) Remote messages to configured OpenHuman channels can bypass human approval, enabling JavaScript/OS command execution through Yuanbao DMs and node_exec, or persistent shell execution through unapproved scheduled jobs. Commands run with the OpenHuman user’s privileges; the demonstrated scheduled-job exploit requires an existing helper executable. 👉Affected: openhuman < 0.57.13 | Upgrade to 0.57.13
🚨 Critical AI Agent RCE in OpenHuman (CVE-2026-54143, CVSS 9.8) External channel messages cause the agent to create persistent shell cron jobs without human approval for host RCE. ⚡ Action: Upgrade to 0.57.13. https://www.thehackerwire.com/vulnerability/CVE-2026-54143/ #AISecurity #AppSec https://t.co/vWbCs0Wxqb
🔴 tinyhumansai openhuman: OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution (CVE-2026-54143) Fix → 0.57.13 https://agentprime.io/advisories/CVE-2026-54143/
CVE-2026-54143 (CRITICAL / 9.8) — #OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.13, a... https://nvd.nist.gov/vuln/detail/CVE-2026-54143 #server #web #cve #kkaasolutions
OpenHuman before 0.57.13 has two critical flaws in its approval gate. CVE-2026-54143 (CVSS 9.8): a remote chat message can create an unapproved shell cron job. CVE-2026-54141 (CVSS 9.0): a Yuanbao DM can trigger node_exec without approval. VulnTracker recommends updating to 0.57.13 and reviewing cron jobs for unknown shell jobs. Details: http://vulntracker.io/cves/CVE-2026-54143 #OpenHuman #CVE #VulnTracker
🆕 New CVE: CVE-2026-54143 (CVSS 9.8, Enclave score 5/10) OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution Remote, no login needed. OpenHuman is an open-source agent harness… https://app.enclave.ai/threat-feed/CVE-2026-54143