VYPR

open-computer-use

by E2b Dev

CVEs (1)

  • CVE-2026-108722MedOct 11, 2026
    risk 0.20cvss 4.2epss —

    open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file in os_computer_use/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or…