CVE-2026-110769 Details

A missing authorization vulnerability has been identified in holaOS versions through 2026.822.1. This vulnerability resides within the channel-gateway connectors for messaging platforms such as Telegram, Slack, and Discord. The issue allows any user on these platforms to submit tasks to the workspace agent of the holaOS operator. The vulnerability arises because the authorization check (#isAllowed) permits all senders when the default allowFrom list is empty. As a result, attackers who can message the operator's bot can manipulate the ChannelIngress.handle to execute tasks using the agent's tools on the operator's machine.

Update the holaOS configuration to include a sender allowlist before deploying the application. Ensure that the allowlist is populated with the correct sender identities, using immutable identifiers rather than mutable usernames.