trycua/cua released agent-v0.9.1. Published on 2026-10-19, this version makes the approval server require a token, binds the playground server to local addresses only, and allows same-origin requests only. The source of these changes is the trycua/cua agent-v0.9.1 release. The repository covers open-source drivers for computer-use tasks, sandboxes used across multiple operating systems, and benchmarks for training, evaluation, and data generation.
Rather than newly describing the project's overall features, this change addresses the conditions under which the servers accept connections. The approval server requires a token, the playground server binds only to local addresses, and requests are permitted only when they come from the same origin. Read together with the description of this as a project that runs computer-use agents across multiple operating systems, what this release confirms is a change in the conditions for server access and request origin. The release notes state each condition but do not include detailed explanations of how the change is implemented or what its scope of application is.
The facts provided include no performance measurements or compatibility information with earlier versions. It is therefore not possible to judge the effect of this change on performance or existing usage patterns. The verifiable scope is limited to three items: the approval server requiring a token, the playground server binding to local addresses, and same-origin requests being allowed. When compatibility or the actual scope of application matters, it is difficult to reach a conclusion from the release notes alone.