Qwen-CUA Operates Any Software Using Only Screenshots and Mouse Clicks
An AI agent that sees only screenshots and controls a mouse can now complete 86% of real desktop tasks — without any access to underlying code or APIs.
- What they did — Built a 397B-parameter mixture-of-experts model that observes only screenshots and emits keyboard/mouse actions, trained with reinforcement learning across ~40,000 verifiable tasks on a fleet of nearly 100,000 vCPUs.
- Key result — Qwen-CUA scores 86.2 on OSWorld-Verified (vs. 73.3 for its base model Qwen3.7 and 78.7 for GPT-5.5), and a scaled trillion-parameter variant reaches 87.6.
- Why it matters — Screenshot-only agents can now handle desktop, web, and professional software tasks competitively with systems that rely on privileged access to page structure or APIs, opening automation to GUI-only and legacy applications.
The Problem
Most AI agents that interact with software rely on structured access — APIs, DOM trees, accessibility metadata — to understand what's on screen and what actions are available. This works well for modern web apps and developer tools, but a huge swath of digital work happens in software that exposes no such hooks: legacy enterprise systems, specialized professional tools, personalized desktop workflows, and dynamic websites that resist scraping [§1].
Humans navigate all of these by looking at the screen and clicking. Building an agent that does the same — perceiving only pixels, acting only through keyboard and mouse — is conceptually simple but practically brutal. GUI state is partially observed and "machine-unreadable"; errors compound over long workflows; and useful feedback often arrives only at the very end of a multi-step task [§1]. The agent also needs to handle tasks that span dozens of steps across multiple applications, retaining visual memory of what it saw earlier.
What They Did
Qwen-CUA is a 397B-parameter mixture-of-experts model (with 17B active parameters per forward pass) built on the Qwen architecture. It takes in a screenshot of a desktop and outputs a keyboard or mouse action — click, drag, type, press a key — then receives the next screenshot and repeats. No DOM trees, no accessibility APIs, no shell access, no application shortcuts [§2.1].
The core engineering challenge is visual memory. A 50-step workflow produces 50 screenshots, and keeping all of them in context quickly blows the token budget. Qwen-CUA maintains 20 "active" screenshots at any time. When the count exceeds 20, the oldest 10 are replaced with a short text placeholder — their reasoning and action text stay, but the images are dropped. This "chunked folding" advances the boundary in blocks of 10 rather than one-at-a-time, which means steps 21 through 30 all share the same prompt prefix, allowing the system to reuse cached computations rather than reprocessing from scratch on every step [§2.2].
Training required building interactive environments at massive scale. The team deployed a cloud fleet with access to nearly 100,000 vCPUs supporting tens of thousands of concurrent desktop environments [§3.1]. They constructed approximately 40,000 verifiable tasks — tasks where a script can check the final environment state to determine success or failure — spanning web services, desktop applications, simulated user interactions, and multi-phase professional workflows [§3, Abstract].
The model was trained iteratively. Each round combined supervised fine-tuning on human demonstrations (including personalized workflows from real desktops) with reinforcement learning using outcome-based rewards. After each round, the team analyzed which tasks the current model still failed, then refreshed both the supervised data and the RL task distribution to target weak spots before training the next iteration [§3, Figure 4(b)]. The RL optimization used a technique called trajectory slicing: the same chunked-folding mechanism from inference splits long episodes into context-bounded training segments, each inheriting the episode's final reward [§2.2].
The Results
On OSWorld-Verified, a benchmark of real operating-system tasks, Qwen-CUA scores 86.2 — up from 73.3 for its base model Qwen3.7, and ahead of GPT-5.5 at 78.7 and Claude Opus 4.8 at 83.4 [Abstract, Figure 1]. Scaling the same training recipe to a model with over one trillion total parameters (Qwen-CUA-Max) pushes this to 87.6 [Abstract].
On OSWorld 2.0, which tests longer-horizon tasks, Qwen-CUA achieves 18.5 binary completion and 48.4 partial completion, up from 2.5 / 22.5 for Qwen3.7 [Abstract]. The model also outperforms Qwen3.7 on all six remaining benchmarks, including WebArena (64.16 vs. 46.20), ScienceBoard (64.50 vs. 35.50), and MacAgentBench (69.2 vs. 57.1) [Figure 1].
On safety, Qwen-CUA reduces attack success on RedTeamCUA from 36.6 to 16.4 compared to Qwen3.7, while simultaneously improving benign task success from 70.5 to 74.0 [Abstract, Figure 1].
The team reports that performance gains are "not explained simply by more verbose reasoning" — the model isn't just thinking longer, it's acting more effectively [§1]. Experiments combining screenshot-based interaction with Bash commands show that hybrid approaches can "substantially shorten trajectories," suggesting the pixel-only approach works best as a foundation augmented with faster tools where available [§1].
Important caveats: all benchmarks use controlled environments, not production desktops with real user data and unpredictable state. The model was evaluated under a specific "native keyboard-and-mouse computer-use protocol" [Abstract], and results may differ under other scaffolding choices. The hybrid Bash experiments are described only briefly, without full benchmark coverage.
Why It Matters
For builders, the practical takeaway is that screenshot-only agents have crossed a capability threshold where they compete with systems that use privileged access to page structure. The model, code, and training recipe are public [Abstract], making it possible to test whether this approach handles your specific legacy or GUI-only software. The hybrid finding — that combining pixel-based control with command-line tools shortens trajectories [§1] — suggests a design pattern worth exploring: use the visual agent as a fallback for anything without an API, and route structured tasks through faster channels.
For decision-makers evaluating automation strategies, this shifts the calculus on which workflows are "automatable." Previously, if software lacked an API, automation meant building brittle screen-scraping scripts or custom integrations. A general-purpose visual agent that scores 86% on diverse OS-level tasks under controlled conditions [Figure 1] suggests that the integration cost for GUI-only software may drop significantly — though the gap between benchmark environments and production desktops with real data, interruptions, and edge cases remains untested.