CVE-2026-105789: CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in microsoft UFO
Description
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in ufo/client/mcp/http_servers/linux_mcp_server.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output forms. An authenticated caller can use sort -o or the optional second uniq operand to create or overwrite files writable by the UFO server process without shell metacharacters, because the allowed binary opens the destination itself and the argument policy does not reject the operation. This can corrupt configuration or other writable data and disrupt the service, but the demonstrated primitive does not directly disclose files or establish arbitrary code execution. This issue is fixed in version 3.0.9.
CVSS v3.1
Score 5.4medium
Affected software
microsoft
UFO
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Microsoft UFO versions before 3.0.9 contain a command injection vulnerability in the execute_command tool located in ufo/client/mcp/http_servers/linux_mcp_server.py. The tool treats 'sort' and 'uniq' commands as read-only, but the free-form command parameter can select their file-output forms (e.g., 'sort -o' or 'uniq' with a second operand). An authenticated caller can exploit this to create or overwrite files writable by the UFO server process without using shell metacharacters, because the allowed binaries open the destination file themselves and the argument validation does not block this operation. This can lead to corruption of configuration or other writable data and disrupt the service. The vulnerability does not enable direct file disclosure or arbitrary code execution. The issue is resolved in UFO version 3.0.9.
Potential Impact
An authenticated attacker can overwrite files writable by the UFO server process, potentially corrupting configuration or other data and causing service disruption. There is no direct file disclosure or arbitrary code execution demonstrated. The impact is limited to integrity and availability disruption.
Mitigation Recommendations
Upgrade Microsoft UFO to version 3.0.9 or later, where this vulnerability is fixed. No other mitigation is indicated or required.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-10-05T20:37:19.363Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac5036b2cdf04f656b8254b
Added to database: 10/06/2026, 14:19:23 UTC
Last enriched: 10/06/2026, 14:33:50 UTC
Last updated: 10/06/2026, 18:57:28 UTC
Views: 13
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.