Vulnpedia
← Search CVEs

CVE-2026-105789

MEDIUM 5.4

Published 2026-10-06 · Last modified 2026-10-06

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in ufo/client/mcp/http_servers/linux_mcp_server.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output forms. An authenticated caller can use sort -o or the optional second uniq operand to create or overwrite files writable by the UFO server process without shell metacharacters, because the allowed binary opens the destination itself and the argument policy does not reject the operation. This can corrupt configuration or other writable data and disrupt the service, but the demonstrated primitive does not directly disclose files or establish arbitrary code execution. This issue is fixed in version 3.0.9.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.7%chance of exploitation in 30 days · 53rd percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

5.4CVSS 3.1 · MEDIUM

  • ConfidentialityNone
  • IntegrityHigh
  • AvailabilityLow

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires a low-privilege account
  • ⚠User interaction: A user must take an action (click / open a file)
  • ⚠Complexity: Needs a race window or specific setup

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Microsoft

Products Ufo

Weakness (CWE)

  • CWE-88: : Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
  • CWE-184: : Incomplete List of Disallowed Inputs

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L

References and research data (JSON)

All CVSS metrics

  • MEDIUM 5.4 v3.1 · CNA Primary
    CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L
  • MEDIUM 5.4 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L

References

Advisories

Technical & other

Sources: NVD · CVE.org · EPSS