CVE-2026-49407 | TinyHumansAI OpenHuman up to 0.57.43 WebSocket Endpoint /ws/dictation buffer overflow

A vulnerability labeled as critical has been found in TinyHumansAI OpenHuman up to 0.57.43. Impacted is an unknown function of the file /ws/dictation of the component WebSocket Endpoint. Such manipulation leads to buffer overflow.

This vulnerability is documented as CVE-2026-49407. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More