CVE-2026-110769: Initialization of a Resource with an Insecure Default in holaboss-ai holaOS

CVE-2026-110769 describes a missing authorization vulnerability in holaOS channel-gateway connectors up to version 2026.822.1. The vulnerability arises because the #isAllowed check accepts all senders if the default allowFrom list is empty, effectively bypassing intended access controls. This allows any user messaging the operator's bots on platforms such as Telegram, Slack, or Discord to submit agent tasks. The ChannelIngress.handle function then passes these tasks to the workspace agent, which runs configured tools on the operator's machine, potentially leading to unauthorized command execution.

An attacker who can send messages to the operator's bots can execute arbitrary agent tasks on the operator's machine. This can lead to unauthorized execution of configured tools, potentially compromising the operator's system confidentiality, integrity, and availability. The CVSS 4.0 score of 8.3 (high severity) reflects the network attack vector, low attack complexity, no privileges or user interaction required, but with high impact on confidentiality and low impact on availability and integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict or monitor messaging platform bot access to trusted users only to reduce exposure. Avoid leaving the allowFrom list empty in configuration to prevent the #isAllowed check from defaulting to allow all senders.