holaOS vulnerabilities

1 known vulnerability in holaOS from Holaboss-ai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  holaOS: Initialization of a Resource with an Insecure Default

  CVE-2026-110769Oct 14, 2026Holaboss-ai

  holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform user to submit agent tasks because the #isAllowed check accepts all senders when the default allowFrom list is empty. Atta