Advisories · Technology

bytedance UI-TARS-desktop.

Every CVE that names bytedance UI-TARS-desktop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81735 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution
- bytedance UI-TARS-desktop
- Authentication bypass
Not analysed yet 27 Aug 2026