Vulnerability · Published Oct 11, 2026 · Assigned by VulnCheck

CVE-2026-108721Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle ID

Medium 5.3

In plain English

A medium-severity security flaw in open-computer-use from iFurySt. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.1%top 97.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers. Attackers, including prompt-injected model turns, can pass identifiers like com.1Password.1Password to get_app_state and action tools to read accessibility trees, capture screenshots, and drive unlocked password manager interfaces.

Affected products (as reported)

Vendor	Product	Versions
iFurySt	open-computer-use	0 – through 1.0.0

Weakness: CWE-178 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N

References

https://hackmd.io/@haind/rJHI_S6IiMl third-party-advisory
https://github.com/iFurySt/open-codex-computer-use/blob/8a3a7dec06402db2d760368cb24676ad3ba42c49/packages/OpenComputerUseKit/Sources/OpenComputerUseKit/AppDiscovery.swift#L144-L198 technical-description
https://github.com/iFurySt/open-codex-computer-use/blob/8a3a7dec06402db2d760368cb24676ad3ba42c49/packages/OpenComputerUseKit/Sources/OpenComputerUseKit/AppDiscovery.swift#L554-L572 technical-description
https://github.com/iFurySt/open-codex-computer-use product
VulnCheck Advisory: Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle ID third-party-advisory