CVE-2026-54143 Details
Description
OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.13, an attacker who can send messages to a configured external channel can cause the agent to create persistent shell cron jobs without human approval. The scheduler later executes these jobs with the privileges of the OpenHuman runtime user. Command validation also permits leading environment assignments that can redirect allowed commands to executable helpers. The demonstrated exploit requires a suitable helper executable already present on the host. This can lead to unauthorized persistent command execution and compromise data and resources accessible to OpenHuman. This issue is fixed in version 0.57.13.
A vulnerability in OpenHuman versions prior to 0.57.13 allows an attacker to send messages to a connected external channel, causing the application to create persistent shell cron jobs without user approval. These jobs are executed with the same privileges as the OpenHuman runtime user, leading to unauthorized command execution on the host. The issue arises from inadequate command validation, which allows exploitation by redirecting approved commands to executable helpers, provided a suitable helper is available on the system. This vulnerability can compromise data and resources accessible to OpenHuman.
The vulnerability has been addressed in OpenHuman version 0.57.13. Users should update to this version or later. For versions prior to 0.57.13, it is recommended to disable or avoid using the 'cron_add' tool for shell jobs, especially in external channel workflows.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/tinyhumansai/openhuman/commit/3a7180da7765af861bf44d79e025fc67dbeae0ca | [email protected] | Source CodeVendor |
| https://github.com/tinyhumansai/openhuman/commit/4d9fe2072fdd5787023bafa2c7a63b6f8a7e9b93 | [email protected] | Source CodeVendor |
| https://github.com/tinyhumansai/openhuman/pull/2736 | [email protected] | Source CodeVendor |
| https://github.com/tinyhumansai/openhuman/pull/3227 | [email protected] | Source CodeVendor |
| https://github.com/tinyhumansai/openhuman/releases/tag/v0.57.13 | [email protected] | Release NotesVendor |
| https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-f46p-6vf9-64mm | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-285 | Improper Authorization | [email protected] |
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| tinyhumansai OpenHuman | < 0.57.13 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | New CVE Received | [email protected] |