CVE-2026-49410

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth_handler consumes an attacker-supplied one-time Telegram login token and passes the returned JWT to credentials::ops::store_session without validating browser fetch metadata or the request origin. An attacker with an OpenHuman account can cause a user with the local core running to visit a malicious page that requests the /auth/telegram endpoint on loopback port 7788, switching the user's active local session to the attacker's backend account and exposing subsequent agent actions, memory writes, and Telegram messages associated with that session to the attacker. This issue is fixed in version 0.56.0.

• CWE-352
• CWE-384

• https://github.com/tinyhumansai/openhuman/commit/b1bbc53fceed7d1f0cff90cbb0a42f4ab8e153a1
• https://github.com/tinyhumansai/openhuman/pull/2331
• https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0
• https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-c4m9-hw7m-vv3m
• https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-c4m9-hw7m-vv3m

Published

Oct 16, 2026

Last Modified

Oct 19, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-49396Nezha Monitoring is a self-hostable, lightweight, servers an…7.1
• CVE-2026-49397Nezha Monitoring is a self-hostable, lightweight, servers an…5.3
• CVE-2026-49400October System provides the system module for October Conten…3.3
• CVE-2026-49401Deno is a JavaScript, TypeScript, and WebAssembly runtime. P…8.4
• CVE-2026-49402Deno is a JavaScript, TypeScript, and WebAssembly runtime. P…8.1
• CVE-2026-49406Deno is a JavaScript, TypeScript, and WebAssembly runtime. P…5.5
• CVE-2026-49411Deno is a JavaScript, TypeScript, and WebAssembly runtime. P…6.5
• CVE-2026-49412The kernel handler for IPV6_MSFILTER dropped a serializing l…7.8
• CVE-2026-49413The Linuxulator determined whether a binary was set-user-ID …7.1
• CVE-2026-49414The ELF image activator cleared per-process ASLR preference …7.8
• CVE-2026-49415During execve(2) of a SUID binary, the new virtual address s…8.8
• CVE-2026-49416The CONS_HISTORY ioctl handler did not adequately validate t…7.8