CVE-2025-55322 on Aonan Guanhttps://oddguan.com/tags/cve-2025-55322/Recent content in CVE-2025-55322 on Aonan GuanAonan Guanhttps://oddguan.com/avatar.webphttps://oddguan.com/avatar.webpHugo -- 0.147.7en-usThu, 25 Sep 2025 00:00:00 +0000Click, Parse, Execute - When a GUI Agent's Control Plane Becomes a Remote Control Surfacehttps://oddguan.com/blog/microsoft-omniparser-gui-agent-computer-use-rce-cve-2025-55322/Thu, 25 Sep 2025 00:00:00 +0000https://oddguan.com/blog/microsoft-omniparser-gui-agent-computer-use-rce-cve-2025-55322/Discovered a critical RCE vulnerability in Microsoft's OmniParser/OmniTool where an unauthenticated execution surface on the VM controller could allow attackers to remotely control GUI agents. Microsoft assigned CVE-2025-55322 and shipped a fix.