EUVD-2026-93420Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Remote API endpoint (AV:N), single deterministic request (AC:L), requires API-key auth and a mapped task name (PR:L); pure deadlock yields A:H with no confidentiality or integrity impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
4DescriptionCVE.org
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint calls SessionManager.get_result_by_task() in ufo/server/services/session_manager.py, which acquires a non-reentrant lock and then calls SessionManager.get_result() to acquire the same lock again when the task name maps to a session. An authenticated caller who knows or creates a mapped task name can therefore block the request indefinitely, and in the default single-process server configuration the blocked event-loop thread prevents other HTTP, WebSocket, and dependent background interactions. Unknown task names do not reach the nested call and are not affected. This issue is fixed in version 3.0.9.
AnalysisAI
Authenticated denial of service in Microsoft UFO prior to 3.0.9: a caller holding a valid API key can indefinitely block the /api/task_result/{task_name} endpoint by requesting a task name that maps to an existing session, causing the server to re-acquire the same non-reentrant lock twice (CWE-833 deadlock). In the vendor's default single-process configuration the hung request stalls the event-loop thread, taking down other HTTP endpoints, WebSocket connections, and dependent background interactions, while unknown or unmapped task names never reach the nested call and are harmless. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated caller with a valid API key (PR:L; the advisory's tests pass an X-API-Key header) AND a task name that maps to an existing session - the attacker must know or create such a mapping. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The input CVSS is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - a network-reachable, low-complexity, authenticated (PR:L) flaw whose only impact is availability (CWE-833 deadlock). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade Microsoft UFO to 3.0.9, the release that contains the fix commit 0eeb792333ce76c856bc1c8b05fd65fc26bd3c50, which removes the nested lock acquisition in SessionManager.get_result_by_task() and instead reads the session results directly. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Missing authentication in Microsoft UFO's mobile MCP servers lets an unauthenticated remote attacker fully control an AD
Authenticated command injection in Microsoft UFO's Mobile MCP server (versions prior to 3.0.9) lets a caller who holds a
DNS rebinding against Microsoft UFO's Linux MCP server (all versions prior to 3.0.8) enables an attacker-controlled web
Argument injection in Microsoft UFO's run_shell tool lets an attacker who can influence an agent workflow execute arbitr
Server-side request forgery in Microsoft UFO's URL validation layer allows unauthenticated remote attackers to bypass th
Session-squatting and memory exhaustion in Microsoft UFO's WebSocket server allow any authenticated client to permanentl
Cross-device system_info disclosure in Microsoft UFO's WebSocket server allows any authenticated DEVICE-role client to r
Same weakness CWE-833 – Deadlock
View allShare
External POC / Exploit Code
Leaving vuln.today