CVE-2026-54140

Name of the Vulnerable Software and Affected Versions OpenHuman versions prior to 0.57.13

Description OpenHuman fails to neutralize instructions or bound descriptive fields when placing names, descriptions, titles, and parameter definitions from external MCP servers into the agent model context. The list tools function produces McpRemoteTool records that preserve this remote content. Because the prompt-injection detector only screens user messages and not MCP definitions, a compromised or malicious MCP server can provide poisoned descriptions. These descriptions are evaluated during every agent turn and can manipulate the model to disclose data, invoke other tools, or perform unauthorized actions.

Recommendations Update to version 0.57.13.