OpenHuman leaks bearer token through approval gate session ID
Personal data and control of this AI agent desktop app can be taken.
Summary
OpenHuman's approval gate uses the JSON-RPC bearer token as an approval session identifier, which leaks the token into stored records, events, logs and RPC responses. An attacker who obtains these can access the core RPC interface while the token remains valid.
Affected when
- OpenHuman versions before 0.57.5
What to do
Update to version 0.57.5. Stable tokens stay usable until rotated, so rotate them.
Products and platforms
CVE IDs
Times
First published
First seen