CVE-2026-54146

Summary

On macOS, OpenHuman versions before 0.57.5 expose a per-launch bearer token (OPENHUMAN_CORE_TOKEN) in the process environment of the Tauri desktop core, allowing any local process running as the same user to read it via KERN_PROCARGS2 and authenticate to the JSON-RPC service with full privileges.

Exploitability

Exploitation requires local access as the same user and knowledge of macOS process introspection; no elevated privileges or bypass of SIP are needed.

Blast radius

An attacker can fully compromise agent memory, integrated accounts, configuration, and service availability without requiring root or disabling security controls.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to OpenHuman version 0.57.5 or later, which removes the insecure exposure of the bearer token in the process environment.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.