CVE-2026-54140

The OpenHuman agent harness (desktop application and Rust library) is vulnerable to MCP tool description injection prior to version 0.57.13 . The application fails to neutralize or bound names, descriptions, titles, and parameter definitions returned by external MCP servers when placing them into...