Skip to content
OpenAdvisories

Vendor

holaboss-ai

2 known vulnerabilities.

Products

holaOS 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-110768

    holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username Allowlist

    holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id. Attackers who register a released username listed in allowFrom can subm…

    holaboss-ai holaOS