CVE-2026-49410 | tinyhumansai OpenHuman up to 0.55.0 Telegram Auth /auth/telegram telegram_auth_handler cross-site request forgery

October 16, 2026 Yanac

A vulnerability was found in tinyhumansai OpenHuman up to 0.55.0 and classified as problematic. The impacted element is the function telegram_auth_handler of the file /auth/telegram of the component Telegram Auth Handler. Executing a manipulation can lead to cross-site request forgery.

This vulnerability is handled as CVE-2026-49410. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More