TI-2026-70700 CVE-2026-108721 · GHSA-6m6f-g6c9-vp3w
Denylist bypass in Open Computer Use via case-variant bundle IDs
Priority LOW 25
Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers.