Skip to content
OpenAdvisories

Vendor

holaboss-ai

2 known vulnerabilities.

Products

holaOS 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-110769

    holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectors

    holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform user to submit agent tasks because the #isAllowed check accepts all senders when the default allowFrom list is empty. Att…

    holaboss-ai holaOS