CVE-2026-54142

The OpenHuman agent harness (desktop application and Rust library) is vulnerable to an indirect prompt injection in versions prior to 0.57.13 . The root cause is that background synchronization for services like email, Slack, and Notion stores raw external content and places it into the model con...