CVE-2026-54141

Name of the Vulnerable Software and Affected Versions OpenHuman versions prior to 0.57.13

Description An issue exists where remote direct messages received through a configured Yuanbao channel are converted into a generic channel AgentTurnRequest that utilizes the default tool policy without establishing an interactive approval context. When the Supervised autonomy policy is active with Node enabled, the node exec function is categorized as a write operation requiring approval; however, the ApprovalGate treats the absence of APPROVAL CHAT CONTEXT as a non-interactive turn, allowing the execution to proceed. This allows an external sender to influence the agent to execute JavaScript and operating-system commands as the OpenHuman user without an approval prompt. This requires a configured Yuanbao channel, the default approval-requiring policy state, Node availability, and the model selecting the node exec function.

Recommendations Update to version 0.57.13.