CVE-2026-54146 - OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)
CVE ID :CVE-2026-54146 Published : Nov. 5, 2026, 5:18 p.m. | 1 hour, 50 minutes ago Description :OpenHuman is an open-source agent harness available as a desktop application and Rust library. From 0.53.15 before 0.57.5 on macOS, core_process.rs in the Tauri desktop process publishes the...