High 8.1Published Oct 16, 2026

CVE-2026-49410OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation

Updated under an hour ago (2026-10-19 07:30 UTC)

Does this affect you?

It affects tinyhumansai openhuman. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for tinyhumansai openhuman

Exploited in the last 30 days

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth_handler consumes an attacker-supplied one-time Telegram login token and passes the returned JWT to credentials::ops::store_session without validating browser fetch metadata or the request origin. An attacker with an OpenHuman account can cause a user with the local core running to visit a malicious page that requests the /auth/telegram endpoint on loopback port 7788, switching the user's active local session to the attacker's backend account and exposing subsequent agent actions, memory writes, and Telegram messages associated with that session to the attacker. This issue is fixed in version 0.56.0.

CVSS: 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Weakness (CWE): CWE-352, CWE-384
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: GitHub_M
NVD analysis: Received
Record last updated: Oct 16, 2026
First seen by InfoSec Signals: Oct 16, 2026

Affected products

Affected products

tinyhumansai openhuman tinyhumansai:openhuman (from the name)	before 0.56.0	CNA record

References

https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-c4m9-hw7m-vv3mx-refsource-confirm
https://github.com/tinyhumansai/openhuman/pull/2331x-refsource-misc
https://github.com/tinyhumansai/openhuman/commit/b1bbc53fceed7d1f0cff90cbb0a42f4ab8e153a1x-refsource-misc
https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0x-refsource-misc

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.