CVE-2026-49393 Details
Description
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the core server protects HTTP POST requests to /rpc with bearer middleware but exposes Socket.IO rpc:request and chat:start handlers without equivalent transport or handler-level authentication. A local unauthenticated client can connect to the Socket.IO namespace and dispatch requests through the same protected controller path that rejects a missing bearer on /rpc. Depending on the selected method, the attacker can read configuration or health data, start agent flows, interact with integrated account APIs, alter local data, or stop and restart services. This issue is fixed in version 0.56.0.
A vulnerability exists in OpenHuman versions prior to 0.56.0, allowing local, unauthenticated clients to bypass authentication on Socket.IO RPC and chat handlers. While HTTP POST requests to the RPC endpoint are protected by bearer token authentication, the Socket.IO namespace lacks equivalent safeguards. This flaw enables unauthorized access to protected core controllers, potentially leading to unauthorized data access, manipulation, and execution of sensitive actions.
Users can update to OpenHuman version 0.56.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/tinyhumansai/openhuman/commit/b1bbc53fceed7d1f0cff90cbb0a42f4ab8e153a1 | [email protected] | Source CodeVendor |
| https://github.com/tinyhumansai/openhuman/pull/2331 | [email protected] | Source CodeVendor |
| https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0 | [email protected] | Release NotesVendor |
| https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-49xv-q9pm-v2qm | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-288 | Authentication Bypass Using an Alternate Path or Channel | [email protected] |
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| tinyhumansai OpenHuman | < 0.56.0 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | New CVE Received | [email protected] |