TI-2026-70701 CVE-2026-108722 · GHSA-jr77-j87x-vf2g
Stored cross-site scripting in open-computer-use session log
Priority MEDIUM 45
open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file in os_computer_use/logging.py, which writes transcript text into log.html without HTML escaping.