CVE-2026-54143

Name of the Vulnerable Software and Affected Versions OpenHuman versions prior to 0.57.13

Description An attacker capable of sending messages to a configured external channel can cause the agent to create persistent shell cron jobs without human approval. These jobs are subsequently executed by the scheduler using the privileges of the OpenHuman runtime user. Additionally, command validation allows leading environment assignments that can redirect permitted commands to executable helpers, provided a suitable helper executable exists on the host. This can result in unauthorized persistent command execution and the compromise of data and resources accessible to the application.

Recommendations Update to version 0.57.13.