openhuman vulnerabilities

CVEs whose affected-version data names the openhuman package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-49410High· 8.1

yesterday

OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth…

▾ Twilighttinyhumansai · openhumanvia CVEORG