VYPR

openhuman

by Tinyhumansai

CVEs (1)

  • CVE-2026-55743CriJun 17, 2026
    risk 0.55cvss 9.6epss 0.00

    The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.