Vulnerability Description
The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/tinyhumansai/openhuman
- https://github.com/tinyhumansai/openhuman/blob/v0.53.49-staging/src/openhuman/se
- https://github.com/tinyhumansai/openhuman/commit/60050aa09a870f53ed7e4cd40ed41fd
FAQ
What is CVE-2026-55743?
CVE-2026-55743 is a vulnerability with a CVSS score of 9.6 (CRITICAL). The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileg...
How severe is CVE-2026-55743?
CVE-2026-55743 has been rated CRITICAL with a CVSS base score of 9.6/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-55743?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.