WebSocket Vulnerability in Microsoft UFO Automation Framework

CVE-2026-105790

What is CVE-2026-105790?

The Microsoft UFO framework, known for enabling intelligent automation across various platforms, contains a vulnerability that affects authenticated device registration through its API. Prior to version 3.0.9, attackers could manipulate a controlled WebSocket endpoint. The framework failed to enforce strict validation on WebSocket connections during cross-origin redirects, permitting potential exposure of internal systems due to inadequate peer-IP validation. Although this vulnerability does not allow arbitrary HTTP methods or access to cloud metadata, it poses a risk of unwanted internal handshake requests, necessitating updates to maintain security.

References