Remote Code Execution Vulnerability in OpenHuman Desktop Application
CVE-2026-54142
8.7HIGH
What is CVE-2026-54142?
A vulnerability in the OpenHuman application enables attackers to exploit background synchronization features. This flaw allows raw external content to be processed by autonomous agents, which may execute non-neutralized embedded instructions from attackers. When content comes from a connected account, malicious payloads can trigger actions in Composio without required approvals. Consequently, this can lead to unauthorized data manipulation, messaging, or information disclosure from integrated services. The issue is resolved in version 0.57.13, reinforcing the importance of keeping applications updated.
Affected Version(s)
openhuman < 0.57.13