CVE ID :CVE-2026-49410 Published : Oct. 16, 2026, 10:17 p.m. | 4ย hours, 10ย minutes ago Description :OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated GET /auth/telegram loopback callback because telegram_auth_handler consumes an attacker-supplied one-time
Vulnerability
CVE-2026-49410
MITRE CVE High
Update to v0.56.0