Skip to content
Threat Feed
Subscribe

Vendor

Cua

1 brief RSS
critical advisory

Authentication Bypass in Cua computer-server via Environment Variable Misconfiguration

Cua computer-server versions prior to 0.3.42 contain an authentication bypass vulnerability triggered when the CONTAINER_NAME environment variable is unset, allowing unauthenticated remote command execution on TCP port 8000.

computer-server authentication-bypass remote-code-execution cve-2026-86121
1r 2t 1c