CyberSecBulletin

Trycua vulnerabilities

We track 1 vulnerability in Trycua products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Trycua vulnerabilities

  • 9.8 Critical severity

    cua-computer-server: Missing Authentication for Critical Functionality

    CVE-2026-86121TrycuaEPSS 1.12%

    Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to r