The vulnerability CVE-2026-55743 in tinyhumansai's OpenHuman desktop agent (versions <=0.54.0) involves improper neutralization of special elements used in OS commands (CWE-78), allowing bypass of the shell tool command allowlist in the SecurityPolicy. This bypass enables an attacker to execute arbitrary OS commands with the privileges of the desktop user. The vulnerability is present in the default Supervised security policy configuration. The CVSS 3.1 base score is 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and a scope change with high impact on confidentiality, integrity, and availability. The product is a cloud service, but the vulnerability affects the desktop agent component. No vendor advisory or patch is currently available.

Successful exploitation allows an attacker to execute arbitrary operating system commands with the privileges of the desktop user running the OpenHuman desktop agent. This can lead to full compromise of the affected system's confidentiality, integrity, and availability. The vulnerability affects the default security policy, making it broadly exploitable by users who can trigger the bypass. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the product is a cloud service with a desktop agent component, verify with the vendor whether the desktop agent has been updated or if mitigations are available. Until a fix is released, consider restricting user interaction with the affected desktop agent or applying additional local security controls to limit command execution capabilities.