Skip to main content

Microsoft UFO CVE-2026-73297

| EUVDEUVD-2026-57325 MEDIUM
Server-Side Request Forgery (SSRF) (CWE-918)
2026-08-12 GitHub_M
SSRF Microsoft Ufo
6.9
CVSS 4.0 · Vendor: GitHub_M
Share

Severity by source

Vendor (GitHub_M) PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.6 HIGH

Network vector, no authentication (PR:N per description); scope changes to cloud metadata or internal services (S:C) with high confidentiality loss; no integrity or availability impact described.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
4.0 AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

4
Patch available
Aug 12, 2026 - 17:17 EUVD
Source Code Evidence Fetched
Aug 12, 2026 - 17:06 vuln.today
Analysis Generated
Aug 12, 2026 - 17:06 vuln.today
CVE Published
Aug 12, 2026 - 16:31 cve.org
MEDIUM 6.9

DescriptionCVE.org

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, _is_blocked_ip in ufo/utils/url_security.py did not block NAT64 prefixes 64:ff9b::/96 and 64:ff9b:1::/48, the 6to4 prefix 2002::/16, or the Teredo prefix 2001::/32 and did not re-check embedded IPv4 destinations, allowing an unauthenticated remote attacker who can influence URLs processed by validate_url to bypass the SSRF guard and reach cloud metadata, internal services, or localhost. This issue is fixed in version 3.0.8.

AnalysisAI

Server-side request forgery in Microsoft UFO's URL validation layer allows unauthenticated remote attackers to bypass the SSRF guard by supplying IPv6 transition addresses - NAT64 (64:ff9b::/96, 64:ff9b:1::/48), 6to4 (2002::/16), or Teredo (2001::/32) - that embed private or link-local IPv4 destinations the guard would otherwise reject. The bypass grants access to cloud instance metadata services (e.g., AWS IMDSv1 at 169.254.169.254), internal APIs, or localhost in any deployment where UFO processes externally-influenced URLs. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Supply crafted NAT64/6to4/Teredo URL to UFO workflow input
Delivery
URL passes _is_blocked_ip guard (transition prefix unrecognized)
Exploit
UFO fetches URL via HTTP to embedded private IPv4 destination
Execution
Cloud metadata service returns IAM credentials or internal service data
Impact
Attacker exfiltrates credentials for lateral movement
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The attacker must be able to influence URLs that are passed to UFO's `validate_url` function - for example, by providing input to an agentic workflow where UFO evaluates or fetches externally-derived URLs as part of its automation logic. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N, score 6.9) accurately captures the threat profile: network-accessible, low complexity, no credentials required, but with Attack Requirements Present (AT:P), meaning the attacker must be positioned to supply URLs to the `validate_url` function - a realistic condition in UFO's agentic automation workflows that process external or user-derived URLs. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with the ability to inject a URL into a UFO agentic workflow submits `http://[64:ff9b::169.254.169.254]/latest/meta-data/iam/security-credentials/role-name` as a target. The `_is_blocked_ip` guard evaluates the address as a global unicast IPv6 address - not matching any blocked private IPv6 prefix - and allows the fetch. …
Remediation Upgrade to Microsoft UFO version 3.0.8 or later, which adds explicit blocklist entries for NAT64 well-known prefix 64:ff9b::/96, NAT64 local-use prefix 64:ff9b:1::/48, 6to4 prefix 2002::/16, and Teredo prefix 2001::/32, and introduces an embedded-IPv4 re-validation iterator that decodes and re-checks IPv4 addresses embedded in transition addresses through the existing policy. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Ufo

View all
CVE-2026-73296 CRITICAL
9.4 Aug 12

Missing authentication in Microsoft UFO's mobile MCP servers lets an unauthenticated remote attacker fully control an AD
CVE-2026-62316 HIGH
8.8 Aug 21

DNS rebinding against Microsoft UFO's Linux MCP server (all versions prior to 3.0.8) enables an attacker-controlled web

CVE-2026-55440 MEDIUM
6.5 Jul 16

Session-squatting and memory exhaustion in Microsoft UFO's WebSocket server allow any authenticated client to permanentl
CVE-2026-54568 MEDIUM
4.3 Jul 16

Cross-device system_info disclosure in Microsoft UFO's WebSocket server allows any authenticated DEVICE-role client to r

Same weakness CWE-918 – Server-Side Request Forgery (SSRF)

View all
CVE-2021-34473 CRITICAL POC
9.1
CVE-2021-26855 CRITICAL POC
9.1
CVE-2021-21985 CRITICAL POC
9.8
CVE-2022-41040 HIGH POC
8.8
CVE-2024-21893 HIGH POC
8.2
CVE-2021-40438 CRITICAL POC
9.0
CVE-2021-21975 HIGH POC
7.5
CVE-2023-48022 CRITICAL POC
9.8

Same technique SSRF

View all
CVE-2021-34473 CRITICAL POC
9.1
CVE-2021-26855 CRITICAL POC
9.1
CVE-2021-21985 CRITICAL POC
9.8
CVE-2024-21893 HIGH POC
8.2
CVE-2021-40438 CRITICAL POC
9.0
CVE-2021-21975 HIGH POC
7.5
CVE-2016-3718 MEDIUM POC
5.5
CVE-2026-15409 CRITICAL POC
10.0

Share

CVE-2026-73297 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy