CyberRota Analysis
AI-GeneratedThe Microsoft UFO open-source framework, prior to version 3.0.8, is vulnerable due to improper validation of HTTP headers, allowing attackers to exploit DNS rebinding techniques to access the local /mcp endpoint. This can lead to unauthorized file access and command execution with the privileges of the affected user. Organizations utilizing this framework should prioritize upgrading to version 3.0.8 to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/http_servers/linux_mcp_server.py binds a FastMCP streamable HTTP server to localhost:8010 but does not validate the Host, Origin, or Sec-Fetch-Site headers. An attacker-controlled web page can use DNS rebinding to reach the local /mcp endpoint, enumerate tool schemas through tools/list, and invoke execute_command with a valid UFO_MCP_API_KEY to read files or execute allowed operating system commands as the victim's user. This issue is fixed in version 3.0.8.