UI-TARS-desktop

The Electron `preload` script exposes `ipcRenderer.invoke` globally without explicit channel whitelisting, allowing the renderer process to invoke *any* main process IPC handler. This is a critical vulnerability. Additionally, various configurable external endpoints (VLM API, UTIO, Report Storage, Preset URLs) pose a significant risk if an attacker can control settings to redirect data or inject malicious configurations. The Content-Security-Policy is permissive, including `'unsafe-inline'` and `'unsafe-eval'` for scripts, and `blob:` for connections, weakening XSS protection. Direct file system access is granted to allowed directories via IPC, which requires robust validation. Sensitive data like API keys are stored locally, which is standard but means machine compromise exposes secrets.