Threat database

holaOS versions up to 2026.822.1 have a missing authorization vulnerability in channel-gateway connectors. This flaw allows any messaging-platform user to submit agent tasks because the authorization check (#isAllowed) incorrectly permits all senders when the allowFrom list is empty. Consequently, attackers who can message the operator's bots on platforms like Telegram, Slack, or Discord can cause the workspace agent to execute configured tools on the operator's machine.

holaOS versions up to 2026.822.1 contain an authorization bypass vulnerability in the channel-gateway Telegram connector. The vulnerability arises because the connector authorizes senders based on mutable usernames instead of immutable numeric IDs. This flaw allows attackers who register a released username listed in the allowFrom configuration to submit commands to the bound workspace agent, potentially executing configured tools on the operator's machine.