tinyhumansai openhuman.

OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growth

• tinyhumansai openhuman
• Authentication bypass
• Denial of service

OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approval

• tinyhumansai openhuman
• CWE-1427

OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)

• tinyhumansai openhuman
• Broken access control
• CWE-526

OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution

• tinyhumansai openhuman
• Command injection
• Broken access control

OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`

• tinyhumansai openhuman
• Code injection
• Broken access control

OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer token

• tinyhumansai openhuman
• Authentication bypass

OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)

• tinyhumansai openhuman
• Information disclosure

OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event data

• tinyhumansai openhuman
• Information disclosure
• Authentication bypass

OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gesture

• tinyhumansai openhuman
• Broken access control
• Information disclosure

OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitization

• tinyhumansai openhuman
• CWE-1427

OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation

• tinyhumansai openhuman
• Cross-site request forgery (CSRF)
• Authentication bypass

OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution

• tinyhumansai OpenHuman
• Command injection
• CWE-184