CVE-2026-55743: OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution
The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenHuman desktop agent shell toolto a version that resolves this vulnerability.Fixed in 0.56.0Patch 60050aa09a870f53ed7e4cd40ed41fd2860329e7 - Configuration
Apply the fix corresponding to commit 60050aa09a870f53ed7e4cd40ed41fd2860329e7 so that the shell tool sandbox blocks -execdir/-okdir for find, not just -exec/-ok.
OpenHuman desktop agent (SecurityPolicy / shell tool allowlist) Shell tool command allowlist validation for find -exec/-ok equivalents = Ensure blocking of find -execdir/-okdir for all relevant find invocations - Configuration
Apply the fix corresponding to commit 60050aa09a870f53ed7e4cd40ed41fd2860329e7 so allowlist validation cannot be bypassed by inline environment-variable assignments (e.g., GIT_EXTERNAL_DIFF=<cmd> git diff) that would otherwise trigger git hook execution at runtime.
OpenHuman desktop agent (SecurityPolicy validation) skip_env_assignments() behavior during allowlist validation = Do not strip leading inline KEY=value environment-variable assignments before allowlist validation (or validate them as part of the command) - Compensating control
If immediate upgrade to the fixed release is not possible, temporarily prevent the shell tool from executing find commands that use -execdir or -okdir by tightening the SecurityPolicy so these flags (or the functionally equivalent patterns) are not permitted.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-55743?
CVE-2026-55743 has a critical severity rating of 9.4.
How does CVE-2026-55743 exploit occur?
CVE-2026-55743 allows arbitrary OS command execution by bypassing the shell tool command allowlist in the OpenHuman desktop agent.
What versions of OpenHuman are affected by CVE-2026-55743?
CVE-2026-55743 affects OpenHuman desktop agent versions up to and including 0.54.0.
How can I mitigate CVE-2026-55743?
To mitigate CVE-2026-55743, update your OpenHuman desktop agent to a version above 0.54.0 where this vulnerability is addressed.
What are the potential impacts of CVE-2026-55743?
CVE-2026-55743 can lead to arbitrary command execution with the privileges of the desktop user, potentially compromising system integrity and confidentiality.