Persistent Shell Cron Job Vulnerability in OpenHuman Agent by Tiny Humans AI
CVE-2026-54143

9.8CRITICAL

Key Information:

Vendor

Tinyhumansai

Status
Openhuman
Vendor
CVE Published:
5 November 2026

What is CVE-2026-54143?

OpenHuman, a versatile open-source agent, is vulnerable to exploitation through its message-handling capabilities. Attackers can initiate malicious actions by sending messages to a pre-configured external channel, resulting in the creation of persistent shell cron jobs without the user's consent. Once established, these jobs are executed with the privileges allocated to the OpenHuman process, allowing unauthorized command execution and potential compromise of sensitive data. The exploit necessitates the presence of a helper executable on the host system, making it crucial for users to update to version 0.57.13 or later to mitigate this risk.

Affected Version(s)

openhuman < 0.57.13

References

https://github.com/tinyhumansai/openhuman/security/adviso...
x_refsource_CONFIRM
https://github.com/tinyhumansai/openhuman/pull/2736
x_refsource_MISC
https://github.com/tinyhumansai/openhuman/pull/3227
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.