CVE-2026-55743CWE-184CWE-78command-injection

CVE-2026-55743

Critical · published June 17, 2026

CVSS v3.1
9.6
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00572 · 46.6th percentile
Weaknesses
CWE-184 · Incomplete List of Disallowed Inputs; CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-06-17T19:17Z
References (3)
https://github.com/tinyhumansai/openhuman · 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2chttps://github.com/tinyhumansai/openhuman/blob/v0.53.49-staging/src/openhuman/security/policy.rs · 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2chttps://github.com/tinyhumansai/openhuman/commit/60050aa09a870f53ed7e4cd40ed41fd2860329e7 · 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
EPSS history
Timeline
  • 17 JUN 14:08Z
    OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution
    cvelistv5