Vulnerability-Lookup

CNVD-2026-26515

Vulnerability from cnvd - Published: 2026-07-07

Title

Microsoft UFO Shell Action Replay操作系统命令注入漏洞

Description

Microsoft UFO是一款开源框架，用于跨设备和平台的智能自动化。 Microsoft UFO存在操作系统命令注入漏洞。该漏洞源于ShellReceiver.run_shell()未能正确处理action参数，将命令字符串直接传递给subprocess.Popen()并设置shell=True，攻击者可利用该漏洞通过写入或修改session/action JSON文件植入shell操作，在UFO进程中执行任意命令。

Severity

中

Patch Name

Microsoft UFO Shell Action Replay操作系统命令注入漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f

Reference

https://nvd.nist.gov/vuln/detail/CVE-2026-45322

Impacted products

Name
Microsoft UFO <=3.0.0

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-45322",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-45322"
    }
  },
  "description": "Microsoft UFO\u662f\u4e00\u6b3e\u5f00\u6e90\u6846\u67b6\uff0c\u7528\u4e8e\u8de8\u8bbe\u5907\u548c\u5e73\u53f0\u7684\u667a\u80fd\u81ea\u52a8\u5316\u3002\n\nMicrosoft UFO\u5b58\u5728\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8eShellReceiver.run_shell()\u672a\u80fd\u6b63\u786e\u5904\u7406action\u53c2\u6570\uff0c\u5c06\u547d\u4ee4\u5b57\u7b26\u4e32\u76f4\u63a5\u4f20\u9012\u7ed9subprocess.Popen()\u5e76\u8bbe\u7f6eshell=True\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u5199\u5165\u6216\u4fee\u6539session/action JSON\u6587\u4ef6\u690d\u5165shell\u64cd\u4f5c\uff0c\u5728UFO\u8fdb\u7a0b\u4e2d\u6267\u884c\u4efb\u610f\u547d\u4ee4\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2026-26515",
  "openTime": "2026-07-07",
  "patchDescription": "Microsoft UFO\u662f\u4e00\u6b3e\u5f00\u6e90\u6846\u67b6\uff0c\u7528\u4e8e\u8de8\u8bbe\u5907\u548c\u5e73\u53f0\u7684\u667a\u80fd\u81ea\u52a8\u5316\u3002\r\n\r\nMicrosoft UFO\u5b58\u5728\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8eShellReceiver.run_shell()\u672a\u80fd\u6b63\u786e\u5904\u7406action\u53c2\u6570\uff0c\u5c06\u547d\u4ee4\u5b57\u7b26\u4e32\u76f4\u63a5\u4f20\u9012\u7ed9subprocess.Popen()\u5e76\u8bbe\u7f6eshell=True\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u5199\u5165\u6216\u4fee\u6539session/action JSON\u6587\u4ef6\u690d\u5165shell\u64cd\u4f5c\uff0c\u5728UFO\u8fdb\u7a0b\u4e2d\u6267\u884c\u4efb\u610f\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft UFO Shell Action Replay\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Microsoft UFO \u003c=3.0.0"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-45322",
  "serverity": "\u4e2d",
  "submitTime": "2026-05-28",
  "title": "Microsoft UFO Shell Action Replay\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2026-45322 (GCVE-0-2026-45322)

Vulnerability from cvelistv5 – Published: 2026-05-27 21:32 – Updated: 2026-05-28 13:21

Title

OS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSON

Summary

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.run_shell() passes a command string from action parameters directly to subprocess.Popen() with shell=True and executable=powershell.exe. The same shell-execution behavior is also reachable through ShellReceiver.execute_command(). The shell receiver is invoked by action classes such as RunShellCommand.execute() and ExecuteCommand.execute(), which forward stored action parameters to the shell receiver. Because UFO stores planned and executed actions in per-session JSON records, an attacker who can write or modify a session/action JSON file can plant a shell action. When the session is resumed or replayed, UFO executes the attacker's command as the UFO process user.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-28 13:21 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

GitHub_M mitre root Scorecard

References

1 reference

URL	Tags
https://github.com/microsoft/UFO/security/advisor…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
microsoft	UFO	Affected: <= 3.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-45322",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-28T13:21:09.646294Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T13:21:51.736Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "UFO",
          "vendor": "microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 3.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.run_shell() passes a command string from action parameters directly to subprocess.Popen() with shell=True and executable=powershell.exe. The same shell-execution behavior is also reachable through ShellReceiver.execute_command(). The shell receiver is invoked by action classes such as RunShellCommand.execute() and ExecuteCommand.execute(), which forward stored action parameters to the shell receiver. Because UFO stores planned and executed actions in per-session JSON records, an attacker who can write or modify a session/action JSON file can plant a shell action. When the session is resumed or replayed, UFO executes the attacker\u0027s command as the UFO process user."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-27T21:32:50.171Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f"
        }
      ],
      "source": {
        "advisory": "GHSA-wj72-7w8h-695f",
        "discovery": "UNKNOWN"
      },
      "title": "OS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSON"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45322",
    "datePublished": "2026-05-27T21:32:50.171Z",
    "dateReserved": "2026-05-11T20:50:30.539Z",
    "dateUpdated": "2026-05-28T13:21:51.736Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2026-26515

CVE-2026-45322 (GCVE-0-2026-45322)

Tags

Sightings

Nomenclature

Related by attack behaviour