CVE-2026-55743

OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution

State: Published
Severity: 9.4 Critical
Published: Jun 17, 2026
Updated: Aug 10, 2026
Reserved: Jun 17, 2026

Description

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.

Scores

CVSS	Score	Vector	Source
4.0	9.4 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	TuranSec
3.1	9.6 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	TuranSec

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-184 Incomplete List of Disallowed Inputs

Affected Products

Product	Versions
OpenHumantinyhumansai	0.54.0 and earlierAffected

References

Fix commit (PR #2636): block find -execdir/-okdirpatch
Vulnerable source at v0.53.49-staging: src/openhuman/security/policy.rstechnical-description
https://github.com/tinyhumansai/openhumanproduct

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.