ByteDance UI-TARS-desktop

• CVE-2026-81735 Critical 10.0 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution 0.8%