Vibe Coding
UI-TARS-desktop's MCP Server Defaulted Its Listen Address to '::' With Optional Auth (CVE-2026-81735, CVSS 10.0)
`startServer.ts` in UI-TARS-desktop's mcp-http-server package defaulted the listen address to `::` when no host was given, so `startSseAndStreamableHttpMcpServer` bound both the Streamable HTTP and SSE transports to every interface, and the authentication middleware was applied only when the caller supplied it. NVD and independent coverage both rate it 10.0: any unauthenticated client with network reach gets arbitrary command execution as the service user, or arbitrary file read and write. It is the worst instance of the 08-27 default-open batch.
Source
↳ Follow the thread