CVE-2026-54141

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, a remote direct message received through a configured Yuanbao channel is converted into a generic channel AgentTurnRequest that uses the default tool policy without establishing an...

CVE-2026-54141

The OpenHuman agent harness (desktop application and Rust library) is vulnerable to a code injection and missing authorization flaw in versions prior to 0.57.13 . A remote direct message received via a configured Yuanbao channel is converted into an AgentTurnRequest using the default tool policy ...