TI-2026-58920 CVE-2026-86121 · GHSA-pccw-h89v-h9cj
Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control
Priority HIGH 81
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands…