CVE-2026-54141

OpenHuman Yuanbao messages can bypass local execution approval

Tiny Humans · OpenHuman Yuanbao channel

First documented disclosure · Review checkpoint

Summary

Remote channel messages can bypass required approval for local execution.

Severity and exploitation evidence

Critical · 9.0/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed public sources describe the vulnerability and its conditions. Malicious exploitation has not been established in the reviewed sources.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The approval layer interpreted requests arriving through the Yuanbao channel differently from requests in web chat.

Conditions required

The victim must connect Yuanbao, have Node available and use an affected approval policy. The agent must select the relevant local tool.

Potential impact

A remote message can cause local code execution without the expected human approval.

Affected versions and configurations

Before 0.57.13.

Fix and mitigation status

0.57.13.

Practical next steps

Upgrade to 0.57.13 and review local execution rights granted to external channels.

Operating lesson

Require the same approval for local execution across all message transports.

Evidence and limits

The dated public project record and the later CVE describe the same affected component. The fixed version is identified by the project or assigning authority.

Sources