CVE-2025-33054: Remote Desktop Spoofing Vulnerability

According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability?

An attacker must trick the user into interacting with a spoofed WebAuthn prompt and entering their credentials.