Microsoft Ufo vulnerabilities

CVE-2026-73296 [CRITICAL] CWE-306 CVE-2026-73296: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated rem

CVE-2026-105788 [HIGH] CWE-78 CVE-2026-105788: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch_app tools in ufo/client/mcp/http_servers/mobile_mcp_server.py pass the authenticated caller-controlled text and package_name parameters into adb shell command argument positions without comprehensive validation.

CVE-2026-105793 [CRITICAL] CWE-78 CVE-2026-105793: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo/client/mcp/http_servers/mobile_mcp_server.py accepts a free-form key_code parameter and passes it to `adb shell input keyevent`. The adb client joins the arguments into a remote command string that the Andro

CVE-2026-46414 [HIGH] CWE-290 CVE-2026-46414: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0. Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO's WebSocket control plane trusts client-supplied identity and role fields in task messages. A client connection can register as a normal device, but later send a TASK message claiming client_type="constellation" and target_i

CVE-2026-45322 [HIGH] CWE-78 CVE-2026-45322: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microso Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.run_shell() passes a command string from action parameters directly to subprocess.Popen()

CVE-2026-62316 [HIGH] CWE-200 CVE-2026-62316: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/http_servers/linux_mcp_server.py binds a FastMCP streamable HTTP server to localhost:8010 but does not validate the Host, Origin, or Sec-Fetch-Site headers. An attacker-controlled web page can use DNS rebinding to reach the local

CVE-2026-73297 [MEDIUM] CWE-918 CVE-2026-73297: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, _is_blocked_ip in ufo/utils/url_security.py did not block NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48, the 6to4 prefix 2002::/16, or the Teredo prefix 2001::/32 and did not re-check embedded IPv4 destinations, allowing an unauthenticated r

CVE-2026-105791 [HIGH] CWE-88 CVE-2026-105791: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the CommandLineExecutor component of ufo/client/mcp/local_servers/cli_mcp_server.py validates only the first token of the bash_command parameter and permits explorer.exe. On Windows, explorer.exe delegates its follo

CVE-2026-46402 [HIGH] CWE-22 CVE-2026-46402: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0. Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO uses the user-controlled task_name value directly when constructing session log paths. An authenticated client can supply path traversal sequences in task_name and cause UFO to create log directories and log files outside the

CVE-2026-105790 [MEDIUM] CWE-918 CVE-2026-105790: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply a permitted attacker-controlled WebSocket endpoint while aip/transport/websocket.py applies pinned_addresses only to the initial destination. The pinned websockets.conn

CVE-2026-55440 [MEDIUM] CWE-400 CVE-2026-55440: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior t Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.7, the COMMAND_RESULTS handler in ufo/server/ws/handler.py called get_or_create_session in ufo/server/services/session_manager.py without owner_client_id, allowing an authenticated client to create an unowned attacker-chosen session_id such as c

CVE-2026-105792 [MEDIUM] CWE-833 CVE-2026-105792: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint calls SessionManager.get_result_by_task() in ufo/server/services/session_manager.py, which acquires a non-reentrant lock and then calls SessionManager.get_result() to acquire the same lock aga

CVE-2026-105789 [MEDIUM] CWE-88 CVE-2026-105789: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. P Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in ufo/client/mcp/http_servers/linux_mcp_server.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output forms. An authenticated caller can use sort -o or

CVE-2026-46416 [MEDIUM] CWE-284 CVE-2026-46416: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0. Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO creates one shared UFOWebSocketHandler instance and reuses it for multiple authenticated WebSocket connections. The handler stores per-connection protocol objects in mutable instance fields. Each new WebSocket connection o

CVE-2026-46538 [MEDIUM] CWE-294 CVE-2026-46538: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0. Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO's constellation client tracks pending task responses by session_id only and does not verify that a TASK_END message came from the device that originally received the task. When the constellation sends a task to a target de

CVE-2026-46544 [MEDIUM] CWE-639 CVE-2026-46544: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0. Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO accepts client-supplied session_id values in WebSocket task messages and reuses an existing in-memory session object if that session_id already exists. If a prior session has completed and remains in memory with populated

CVE-2026-54568 [MEDIUM] CWE-639 CVE-2026-54568: Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3. Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a client connected to the UFO WebSocket server as a DEVICE could call DEVICE_INFO_REQUEST with another device's target_id and receive that device's server-side system_info through ufo/server/ws/handler.py, because handle_device_info_r