CVE-2026-49407

HighCVSS 7.7/10Last modified Nov 9, 2026

Description

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.44, its local /ws/dictation WebSocket endpoint lacks client authentication and browser-origin validation. An unauthenticated client, including a malicious web page able to reach the endpoint, can submit audio and trigger resource-intensive speech-to-text processing. Earlier affected versions also accumulate audio in an unbounded buffer, allowing continuous streaming to exhaust process memory. These conditions can degrade performance, exhaust resources, or crash the application. This issue is fixed in version 0.57.44.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-306 CWE-400 CWE-770

Affected software

Vendor	Product	Versions
tinyhumansai	openhuman	< 0.57.44

References

Timeline

Published: Nov 5, 2026
Last modified: Nov 9, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-494108.1OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site reque CVE-2026-494116.5Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.0, the Node.js compatibility TCP path checked the permission against CVE-2026-494127.8The kernel handler for IPV6_MSFILTER dropped a serializing lock in order to copy the source-filter list from userspace, then reacquired the CVE-2026-494137.1The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the P_SUGID process flag. During execve(2), this fl CVE-2026-494147.8The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rat CVE-2026-494158.8During execve(2) of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this windo CVE-2026-494167.8The CONS_HISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer overflow in the buff CVE-2026-494177.0Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memo CVE-2026-494188.8When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid b CVE-2026-494198.8When the JAIL_AT_DESC flag is specified, kern_jail_set() and kern_jail_get() released the reference to the caller's current prison before lo CVE-2026-49427.5IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport Layer Security CVE-2026-494208.8The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking whether the rewritten data fit in th