CyberSecBulletin

Holaboss-ai vulnerabilities

We track 1 vulnerability in Holaboss-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.

1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score

Latest Holaboss-ai vulnerabilities

  • 8.6 High severity

    holaOS: Initialization of a Resource with an Insecure Default

    CVE-2026-110769Holaboss-ai

    holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform user to submit agent tasks because the #isAllowed check accepts all senders when the default allowFrom list is empty. Atta