CVE-2026-54146 Details
Description
OpenHuman is an open-source agent harness available as a desktop application and Rust library. From 0.53.15 before 0.57.5 on macOS, core_process.rs in the Tauri desktop process publishes the per-launch OPENHUMAN_CORE_TOKEN bearer credential in its process environment even though the core now runs as an in-process task. Another process running as the same user can read that environment through the macOS KERN_PROCARGS2 process-inspection interface, recover the token together with the local host and port, and authenticate to the core JSON-RPC service with the authority of the desktop frontend. The attacker can read agent memory and integrated-account data, invoke privileged actions, change configuration, and stop or disrupt services without root access, developer mode, or changes to System Integrity Protection. This issue affects Intel and Apple Silicon macOS systems. This issue is fixed in version 0.57.5.
A vulnerability exists in OpenHuman versions 0.53.15 prior to 0.57.5 on macOS, where the application unintentionally exposes a per-launch RPC bearer token, `OPENHUMAN_CORE_TOKEN`, as a process-wide environment variable. This leak occurs in the Tauri desktop process, which now runs core tasks internally. Other processes under the same user can access this token through macOS's KERN_PROCARGS2 process-inspection feature, along with the local host and port information, to authenticate with the core JSON-RPC service as a trusted desktop frontend. This exploitation allows access to sensitive agent memory and integrated account data, the ability to perform privileged actions, modify configurations, and disrupt services, all without requiring root access, developer mode, or alterations to System Integrity Protection.
Users can update to OpenHuman version 0.57.5 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/tinyhumansai/openhuman/commit/336d811ca0ca610b49e82c16a11259c7a4014f28 | [email protected] | Source CodeVendor |
| https://github.com/tinyhumansai/openhuman/pull/2709 | [email protected] | Source CodeVendor |
| https://github.com/tinyhumansai/openhuman/releases/tag/v0.57.5 | [email protected] | Release NotesVendor |
| https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-wp8v-f9rw-qjxc | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-526 | Cleartext Storage of Sensitive Information in an Environment Variable | [email protected] |
| CWE-732 | Incorrect Permission Assignment for Critical Resource | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| OpenHuman | >= 0.53.15, < 0.57.5 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | New CVE Received | [email protected] |