CVE-2026-54146

The OpenHuman desktop application and Rust library (versions 0.53.15 before 0.57.5 ) on macOS are vulnerable to a bearer token leak. The core_process.rs file in the Tauri desktop process incorrectly publishes the OPENHUMAN_CORE_TOKEN in the process environment, even though the core runs as an in-...