Microsoft UFO up to 3.0.8 Linux MCP Server linux_mcp_server.py execute_command file inclusion

Summaryinfo

A vulnerability has been found in Microsoft UFO up to 3.0.8 and classified as problematic. This impacts the function execute_command of the file ufo/client/mcp/http_servers/linux_mcp_server.py of the component Linux MCP Server. Performing a manipulation of the argument command results in file inclusion. This vulnerability is identified as CVE-2026-105789. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Microsoft UFO up to 3.0.8. This affects the function execute_command of the file ufo/client/mcp/http_servers/linux_mcp_server.py of the component Linux MCP Server. The manipulation of the argument command with an unknown input leads to a file inclusion vulnerability. CWE is classifying the issue as CWE-73. The product allows user input to control or influence paths or file names that are used in filesystem operations. This is going to have an impact on integrity, and availability. The summary by CVE is:

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in ufo/client/mcp/http_servers/linux_mcp_server.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output forms. An authenticated caller can use sort -o or the optional second uniq operand to create or overwrite files writable by the UFO server process without shell metacharacters, because the allowed binary opens the destination itself and the argument policy does not reject the operation. This can corrupt configuration or other writable data and disrupt the service, but the demonstrated primitive does not directly disclose files or establish arbitrary code execution. This issue is fixed in version 3.0.9.

It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2026-105789 since 10/05/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/06/2026).

Upgrading to version 3.0.9 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-93406). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Microsoft

Name

• UFO

Version

• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.0.7
• 3.0.8

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://github.com/microsoft/UFO/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion