Skip to content
OpenAdvisories

Vendor

tinyhumansai

12 known vulnerabilities.

Products

openhuman 12
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-49405

    OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event data

    OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the local server exposes the server-sent events endpoint at /events without bearer authentication, permits cross-origin browser access, and uses only…

    tinyhumansai openhuman
  • Medium 6.1
    CVE-2026-54144

    OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gesture

    OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0 on macOS, the runtime injected into a supported remote account webview such as Google Meet allows page JavaScript to call getDisplayMedia without a li…

    tinyhumansai openhuman