CVE-2026-49393

Name of the Vulnerable Software and Affected Versions OpenHuman versions prior to 0.56.0

Description The core server fails to implement authentication for Socket.IO handlers, specifically rpc:request and chat:start, while HTTP POST requests to the '/rpc' endpoint are protected by bearer middleware. A local unauthenticated client can bypass these protections by connecting to the Socket.IO namespace to dispatch requests. This allows an attacker to read configuration or health data, initiate agent flows, interact with integrated account APIs, modify local data, or manage services by stopping and restarting them.

Recommendations Update to version 0.56.0.