Ufo (Microsoft) - vulnerabilities (CVEs)

17 CVEs, 6 in the last 30 days, 3 known versions, newest CVE from 2026-10-06. Vendor: Microsoft.

CVEs of Ufo

• CVE-2026-105793 - CVSS 9.1 (critical), 2026-10-06: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in…
• CVE-2026-105792 - CVSS 6.5 (medium), 2026-10-06: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint…
• CVE-2026-105791 - CVSS 7.5 (high), 2026-10-06: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the…
• CVE-2026-105790 - CVSS 6.4 (medium), 2026-10-06: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through…
• CVE-2026-105789 - CVSS 5.4 (medium), 2026-10-06: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in…
• CVE-2026-105788 - CVSS 8.8 (high), 2026-10-06: Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch_app tools in…
• CVE-2026-62316 - CVSS 8.8 (high), 2026-08-21: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/http_servers/linux_mcp_server.py…
• CVE-2026-73297 - CVSS 6.9 (medium), 2026-08-12: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, _is_blocked_ip in ufo/utils/url_security.py did…
• CVE-2026-73296 - CVSS 9.4 (critical), 2026-08-12: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and…
• CVE-2026-55440 - CVSS 6.5 (medium), 2026-07-16: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.7, the COMMAND_RESULTS handler in…
• CVE-2026-54568 - CVSS 4.3 (medium), 2026-07-16: Microsoft UFO open-source framework for intelligent automation across devices and platforms. From 3.0.0 until 3.0.6, a client connected to the UFO WebSocket…
• CVE-2026-46544 - CVSS 5.3 (medium), 2026-05-27: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO accepts client-supplied…
• CVE-2026-46538 - CVSS 5.9 (medium), 2026-05-27: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO's constellation client tracks…
• CVE-2026-45322 - CVSS 7.8 (high), 2026-05-27: Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain…
• CVE-2026-46416 - CVSS 6.3 (medium), 2026-05-27: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO creates one shared…
• CVE-2026-46414 - CVSS 8.8 (high), 2026-05-27: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO's WebSocket control plane…
• CVE-2026-46402 - CVSS 8.1 (high), 2026-05-27: Microsoft UFO open-source framework for intelligent automation across devices and platforms. In 3.0.1-4-ge2626659, Microsoft UFO uses the user-controlled…