CVE-2026-54142

Name of the Vulnerable Software and Affected Versions OpenHuman versions prior to 0.57.13

Description Background synchronization for connected services like email, Slack, and Notion stores raw external content and places it into the model context of autonomous background agents without neutralizing embedded instructions. Because ApprovalGate treats tool calls lacking an interactive chat context as pre-authorized automation, attacker-authored content processed during a background tick can manipulate the model into invoking Composio actions without an approval request. This allows an attacker who can deliver content to a connected account to send or forward data, post messages, create or modify third-party content, or disclose information from memory and integrations. The issue requires an active integration and successful model interpretation of the injected instructions.

Recommendations Update to version 0.57.13.