OmniParser Remote Code Execution Vulnerability

OmniParser binds to all network interfaces without access controls, allowing anyone on the network to send commands that execute code on the affected server. This is dangerous because it exposes a critical service to unauthorized remote execution.

The vulnerability exists due to binding to 0.0.0.0 or equivalent unrestricted addresses without authentication or network segmentation. An unauthenticated network attacker can connect to the exposed service and trigger remote code execution, potentially compromising the entire system.