Tuui
Monthly
Remote code execution in TUUI, the AI-QL desktop MCP client, affects every release prior to 1.3.4: the Markdown rendering component executes arbitrary JavaScript delivered inside ECharts code blocks, and the injected script pivots through the application's exposed IPC interface to spawn arbitrary system processes on the victim's machine. An unauthenticated remote attacker achieves this simply by getting the victim to open a crafted Markdown message in the client - active user interaction is mandatory, so there is no drive-by against an idle client - with the pre-patch CSP's 'unsafe-eval' allowance making the script execution trivially reliable. Risk is tempered in practice by EPSS 0.43% (roughly the 62nd percentile), the absence of any public exploit code or CISA KEV confirmation at time of analysis, and TUUI's very small user base, which makes exploitation targeted rather than opportunistic; a vendor-released fix ships in version 1.3.4.
Remote code execution in TUUI, the AI-QL desktop MCP client, affects every release prior to 1.3.4: the Markdown rendering component executes arbitrary JavaScript delivered inside ECharts code blocks, and the injected script pivots through the application's exposed IPC interface to spawn arbitrary system processes on the victim's machine. An unauthenticated remote attacker achieves this simply by getting the victim to open a crafted Markdown message in the client - active user interaction is mandatory, so there is no drive-by against an idle client - with the pre-patch CSP's 'unsafe-eval' allowance making the script execution trivially reliable. Risk is tempered in practice by EPSS 0.43% (roughly the 62nd percentile), the absence of any public exploit code or CISA KEV confirmation at time of analysis, and TUUI's very small user base, which makes exploitation targeted rather than opportunistic; a vendor-released fix ships in version 1.3.4.