This vulnerability allows an attacker to recover the JSON‑RPC bearer token that the approval gateway uses as a session identifier. The token is stored unencrypted in a SQLite database, written to debug logs and returned in RPC responses. Once recovered, the token grants full access to the core RPC interface for as long as the token remains valid. The attacker can therefore read sensitive agent data, invoke privileged operations, and potentially alter integrations.

The affected product is tinyhumansai/OpenHuman. Versions prior to 0.57.5 are impacted. Clients using those releases, regardless of desktop or Rust library usage, are at risk.

The CVSS score of 8.8 indicates a high severity flaw. Exploitation requires the attacker to obtain persisted artifacts or logs, which is feasible if the underlying storage or logging mechanism is accessible. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. Nonetheless, the exposed credential can be leveraged to perform unauthorized actions without further compromise, making the risk significant for any organization that relies on OpenHuman.