interesting · Wi-Fi — RCE
A Maestro bearer URL can authorize commands as the logged-in user.
Affects
Maestro, a desktop application for controlling development tools and AI agents on Windows, macOS, and Linux
The UUID can be recovered from plaintext LAN traffic, a leaked pairing or sharing URL, a broadly readable local file, or a cross-origin connection to services bound on all interfaces.
Detail and 3 sources
Possession of that URL reaches Maestro’s interactive terminal with the user’s authority. The coordinated advisory says mitigations shipped for the exposed bind, bearer credential, cross-origin paths, and file permissions.