CVE-2026-110768

MediumCVSS 4.8

Published: 14/10/2026(UTC)Updated: 15/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id. Attackers who register a released username listed in allowFrom can submit turns to the bound workspace agent, which runs configured tools on the operator's machine.

Risk Assessment

An attacker can hijack the agent and execute arbitrary configured tools on the operator's machine, leading to remote code execution and full system compromise.

Recommendation

Upgrade holaOS beyond 2026.822.1, and until then restrict access to the Telegram connector and audit the allowFrom list for released usernames.

Other vulnerabilities in holaOS

CVE-2026-110769High
holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform user to submit agent tasks because the #isAllowed check accepts all senders when the default allowFrom list is empty. Attackers who can message the operator's Telegram, Slack, Discord, or other bot can have ChannelIngress.handle pass turns to the workspace agent, running configured tools on the operator's machine.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS