Ui Tars Desktop
Monthly
Unauthenticated remote command execution affects the @agent-infra MCP servers shipped with ByteDance's UI-TARS-desktop, whose shared mcp-http-server helper defaulted its bind address to '::' (all interfaces) and only enforced authentication when a caller explicitly passed middleware. Because the commands and filesystem server entry points call startSseAndStreamableHttpMcpServer with only a host and port and no middleware, any client that can reach the listening port can invoke the run_command tool (routed to child_process.exec) or the file read/write tools with no credential. Reported by VulnCheck and rated CVSS 4.0 10.0; no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated remote command execution affects the @agent-infra MCP servers shipped with ByteDance's UI-TARS-desktop, whose shared mcp-http-server helper defaulted its bind address to '::' (all interfaces) and only enforced authentication when a caller explicitly passed middleware. Because the commands and filesystem server entry points call startSseAndStreamableHttpMcpServer with only a host and port and no middleware, any client that can reach the listening port can invoke the run_command tool (routed to child_process.exec) or the file read/write tools with no credential. Reported by VulnCheck and rated CVSS 4.0 10.0; no public exploit identified at time of analysis, and it is not listed in CISA KEV.