Description
Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | OmniParser | 1.0.0 – < 2.0.1 | 2.0.1 |
Advisories 1
- MSRC-CVE-2025-55322 OmniParser Remote Code Execution Vulnerability Microsoft Security Response Center · Sep 24, 2025
References
- OmniParser Remote Code Execution Vulnerability vendor-advisory patch