CVE-2026-55743 — OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution
The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS com…
Published: 2026-06-17 · CVSS: 9.4 · CVSS 4.0
The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7