CVE-2026-110769

HighCVSS 8.6

Published: 14/10/2026(UTC)Updated: 15/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

20th percentile - higher than 20% of all known CVEs

Summary

holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform user to submit agent tasks because the #isAllowed check accepts all senders when the default allowFrom list is empty. Attackers who can message the operator's Telegram, Slack, Discord, or other bot can have ChannelIngress.handle pass turns to the workspace agent, running configured tools on the operator's machine.

Risk Assessment

An unauthorized user can run any configured tools on the operator's machine by sending a message to the bot. This can lead to code execution and compromise of confidentiality, integrity, and availability of the system.

Recommendation

Update holaOS to a version later than 2026.822.1 if available. Configure a non-empty allowFrom list for all channel-gateway connectors.

Other vulnerabilities in holaOS

CVE-2026-110768Medium
holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only numeric id. Attackers who register a released username listed in allowFrom can submit turns to the bound workspace agent, which runs configured tools on the operator's machine.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS