The vulnerability allows a local user to read the bearer credential OPENHUMAN_CORE_TOKEN that the Tauri desktop process publishes in its environment on macOS. By inspecting the process arguments through the KERN_PROCARGS2 interface, an attacker can obtain the token, the host and port of the core JSON‑RPC service, and authenticate with full authority of the desktop frontend. This grants the attacker the ability to read agent memory, access integrated‑account data, trigger privileged actions, modify configuration, or stop and disrupt services without requiring root privileges, developer mode, or changes to System Integrity Protection. The weakness belongs to CWE‑526 and CWE‑732.

Versions of OpenHuman from 0.53.15 up to, but not including, 0.57.5 running on macOS (Intel or Apple Silicon) are affected. The desktop application and Rust library both expose the token in their process environment, enabling local exploitation by any process that is running under the same user account.

The CVSS score of 8.8 indicates high severity and the EPSS score is currently unavailable, but the lack of a KEV listing does not diminish the risk of local exploitation. An attacker only needs to be on the same user account and can leverage standard macOS system calls to read the token; no additional privileges or remote network exposure are required. Given the high CVSS and the clear local privilege escalation path, the vulnerability presents a significant risk to any system where multiple processes run under the same user.