CyberRota Analysis
AI-GeneratedVersions of Cua computer-server prior to 0.3.42 are critically vulnerable due to a lack of authentication when the CONTAINER_NAME environment variable is unset, allowing unauthenticated attackers to execute arbitrary commands and access sensitive file operations. This vulnerability exposes TCP port 8000, enabling attackers to run shell commands and interact with the system without any authentication barriers. Organizations using affected versions should prioritize immediate updates to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to run shell commands via the run_command endpoint, read and write arbitrary files through file operation endpoints, and access interactive PTY shells without authentication.