CVE-2026-105790
MEDIUM 6.4Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply a permitted attacker-controlled WebSocket endpoint while aip/transport/websocket.py applies pinned_addresses only to the initial destination. The pinned websockets.connect() client follows cross-origin redirects and opens a new TCP connection before Galaxy performs its post-handshake peer-IP validation, allowing WebSocket upgrade requests to internal hosts reachable from the server. The confirmed impact is the internal connection and handshake request, and does not establish arbitrary HTTP methods, response-body disclosure, a completed AIP session, or cloud metadata access. This issue is fixed in version 3.0.9.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.5%chance of exploitation in 30 days · 45th percentile
Impact if exploited
6.4CVSS 3.1 · MEDIUM
- ConfidentialityLow
- IntegrityLow
- AvailabilityNone
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ⚠Privileges: Requires a low-privilege account
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
- CWE-918: : Server-Side Request Forgery (SSRF)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
References and research data (JSON)
All CVSS metrics
- MEDIUM 6.4 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N - MEDIUM 6.4 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
References
Exploit-tagged references (not proof of a PoC)
- https://github.com/microsoft/UFO/security/advisories/GHSA-3pgm-xw75-hq27 CVE record · GitHub_M · Updated 2026-10-06T14:08:24.075Z
CVE record · CISA-ADP · Updated 2026-10-06T17:17:10.713Z
NVD · CVE-2026-105790 · Updated 2026-10-06T18:16:46.847
Advisories
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93407 EUVD · EUVD-2026-93407
Technical & other
- https://github.com/microsoft/UFO/commit/f31fb5ef7d07b7825a03fe34b88f1f21cb5cfd35 CVE record · GitHub_M · Updated 2026-10-06T14:08:24.075Z
NVD · CVE-2026-105790 · Updated 2026-10-06T18:16:46.847 - https://github.com/microsoft/UFO/releases/tag/v3.0.9 CVE record · GitHub_M · Updated 2026-10-06T14:08:24.075Z
NVD · CVE-2026-105790 · Updated 2026-10-06T18:16:46.847