CVE-2026-108721: Improper Handling of Case Sensitivity in iFurySt open-computer-use

The vulnerability arises from open-computer-use versions up to 1.0.0 on macOS improperly handling case sensitivity in bundle identifiers. Local MCP callers can bypass the password-manager denylist by submitting case-variant bundle identifiers (e.g., com.1Password.1Password) to get_app_state and action tools. This bypass allows attackers, including those leveraging prompt-injected model turns, to read accessibility trees, capture screenshots, and manipulate unlocked password manager interfaces, potentially exposing sensitive information.

Exploitation of this vulnerability allows local attackers to bypass password-manager denylist protections, leading to unauthorized access to accessibility data, screenshots, and control over unlocked password manager interfaces. This could result in exposure of sensitive credentials and user data. The CVSS 4.0 score of 5.8 reflects a medium severity with partial attack complexity and partial user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or vendor advisory is provided, users should monitor official iFurySt communications for updates. Until a fix is available, restricting local access and limiting use of affected versions may reduce risk.