Vulnerability in Microsoft UFO Automation Framework Allows File Corruption

CVE-2026-105789

What is CVE-2026-105789?

The Microsoft UFO automation framework has a vulnerability in the execute_command tool that permits an authenticated user to erroneously invoke sort or uniq commands in a manner that can lead to unintended file overwrites. Specifically, the vulnerability lies in the handling of command parameters that permit modification of file outputs without properly enforcing argument restrictions. This could potentially corrupt essential configuration files and disrupt service operations. This issue has been rectified in version 3.0.9, emphasizing the need for users to update to this version to ensure security and data integrity.

References