Arbitrary Command Execution Vulnerability in UI-TARS-desktop by ByteDance
CVE-2026-81735

10CRITICAL

Key Information:

Vendor

Bytedance

Status
Ui-tars-desktop
Vendor
CVE Published:
27 August 2026

What is CVE-2026-81735?

The mcp-http-server package in the UI-TARS-desktop application is susceptible to an arbitrary command execution vulnerability due to its default listen address being set to '::', binding to every network interface. The authentication middleware for the service is optional and only applies when explicitly provided by the caller. This oversight allows any unauthenticated client that can reach the service to execute arbitrary commands, posing a significant security risk. The issue emerged from specific entry points in the system that bypassed authentication entirely, exposing critical functionalities such as command execution and file management without appropriate credentials.

Affected Version(s)

UI-TARS-desktop 0

UI-TARS-desktop c2ad42e3eb9b27830db41a3e6f51ca7179d9b168

References

https://github.com/bytedance/UI-TARS-desktop/pull/1918
issue-tracking
https://github.com/bytedance/UI-TARS-desktop/commit/c2ad4...
patch
https://github.com/bytedance/UI-TARS-desktop
product

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Avishai Gonen (Pluto Security)
.