CVE-2026-110768: Authentication Bypass by Spoofing in holaboss-ai holaOS

CVE-2026-110768 describes an authentication bypass vulnerability in holaOS through version 2026.822.1. The vulnerability exists in the channel-gateway Telegram connector, which authorizes users by mutable usernames rather than immutable numeric IDs. Attackers can exploit this by registering a released username that is allowed in the allowFrom list, enabling them to submit turns to the bound workspace agent. This agent executes configured tools on the operator's machine, potentially allowing unauthorized command execution.

An attacker can bypass authentication by spoofing a username that was previously registered and is allowed by the system. This enables unauthorized submission of commands to the workspace agent, which runs tools on the operator's machine. The impact includes potential unauthorized execution of commands or tools, leading to compromise of the operator's environment. The CVSS 4.0 score is 6.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and low impact on confidentiality and integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid relying on mutable usernames for authorization in the Telegram connector. Consider restricting or monitoring the allowFrom list to prevent attackers from registering released usernames. No official fix or patch links are currently provided.