CVE-2026-54145

Summary

The approval gate in OpenHuman before v0.57.5 incorrectly uses the JSON-RPC bearer token as an approval session identifier, causing the token to be persisted in logs, events, and RPC responses, allowing an attacker with access to these artifacts to recover the token and abuse the RPC interface.

Exploitability

Exploitation requires local access to persisted approval records, debug logs, or RPC responses containing the token; the attacker must also have valid login credentials (PR:L) to trigger the vulnerable flow.

Blast radius

Successful exploitation grants full access to the core RPC interface while the token is valid, enabling exposure of sensitive agent/integration data and execution of privileged operations.

Detection

Defenders should monitor for unexpected persistence of JSON-RPC bearer tokens in approval-related logs, event records, or RPC response payloads; presence of such tokens outside secure storage indicates exposure.

Prioritized remediation

Upgrade to OpenHuman version 0.57.5 or later, which fixes the token handling in the approval gate.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.