---
id: CVE-2026-54144
title: >-
  OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop
  without a user gesture
summary: >-
  OpenHuman is an open-source agent harness available as a desktop application
  and Rust library. Before 0.56.0 on macOS, the runtime injected into a
  supported remote account webview such as Google Meet allows page JavaScript to
  call getDis…
severity: medium
cvss: 6.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-285
  - CWE-359
vendor: tinyhumansai
product: openhuman
affected:
  - openhuman < 0.56.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:58:07.169133Z'
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:58:14.948Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-54144'
references:
  - url: >-
      https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-936r-hw6f-jjf2
    label: >-
      https://github.com/tinyhumansai/openhuman/security/advisories/GHSA-936r-hw6f-jjf2
  - url: 'https://github.com/tinyhumansai/openhuman/pull/2636'
    label: 'https://github.com/tinyhumansai/openhuman/pull/2636'
  - url: >-
      https://github.com/tinyhumansai/openhuman/commit/60050aa09a870f53ed7e4cd40ed41fd2860329e7
    label: >-
      https://github.com/tinyhumansai/openhuman/commit/60050aa09a870f53ed7e4cd40ed41fd2860329e7
  - url: 'https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0'
    label: 'https://github.com/tinyhumansai/openhuman/releases/tag/v0.56.0'
tags:
  - cve.org
ingestedAt: '2026-11-05T22:38:31.938Z'
---

## Overview

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0 on macOS, the runtime injected into a supported remote account webview such as Google Meet allows page JavaScript to call getDisplayMedia without a live user gesture. Instead of rejecting the request, the shim falls through to native Chromium capture behavior, and the embedded CEF environment can auto-select the primary display because it lacks the normal desktop-media picker. If OpenHuman already has macOS Screen Recording permission and an attacker obtains JavaScript execution in an allowed embedded origin, the attacker can obtain a real desktop capture stream without a new user gesture. The stream can expose chats, documents, source code, email, meeting content, credentials, one-time codes, and other visible desktop information. The separate direct screen_share_begin_session IPC path failing origin validation does not prevent exploitation through getDisplayMedia. This issue is fixed in version 0.56.0.

## Affected

- `openhuman < 0.56.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.