CVE-2026-54145

The OpenHuman open-source agent harness (desktop application and Rust library) contains a vulnerability in versions prior to 0.57.5 . The approval gate incorrectly uses the JSON-RPC bearer token as an approval session identifier, causing the credential to be exposed in SQLite plaintext , debug lo...