CVE-2026-49405

Name of the Vulnerable Software and Affected Versions OpenHuman versions prior to 0.56.0

Description The local server exposes the server-sent events endpoint "/events" without bearer authentication and allows cross-origin browser access. The system relies solely on a caller-supplied client id to select WebChannelEvent objects from the process-wide event bus. Because the system identifier is fixed, the proactive-message stream is predictable, allowing an unauthenticated local client or a malicious web page to subscribe to another client's stream by guessing or knowing the identifier. This can lead to the exposure of assistant responses, streamed message content, tool names, tool arguments, and raw tool outputs.

Recommendations Update to version 0.56.0.