CVE-2026-108721

MediumCVSS 5.3

Published: 11/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 11/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers. Attackers, including prompt-injected model turns, can pass identifiers like com.1Password.1Password to get_app_state and action tools to read accessibility trees, capture screenshots, and drive unlocked password manager interfaces.

Risk Assessment

Attackers can access the password manager and steal sensitive data such as passwords and keys, leading to a serious security breach. This may result in account takeover and unauthorized access to systems.

Recommendation

Update Open Computer Use to a version later than 1.0.0 if available, or fix case sensitivity handling in bundle identifiers. Restrict MCP tool permissions and monitor for unusual activity.

Other vulnerabilities in Open Computer Use

CVE-2026-108722Medium
open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file in os_computer_use/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in run_command output, can inject script that runs when operators open the log, exfiltrating transcript contents.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS