CVE-2026-62316

Name of the Vulnerable Software and Affected Versions Microsoft UFO versions prior to 3.0.8

Description The ufo/client/mcp/http servers/linux mcp server.py component binds a FastMCP streamable HTTP server to localhost:8010 without validating the Host, Origin, or Sec-Fetch-Site headers. This allows an attacker-controlled web page to utilize DNS rebinding—a technique used to bypass the Same-Origin Policy—to access the local /mcp endpoint. An attacker can then enumerate tool schemas via tools/list and call the execute command() function using a valid UFO MCP API KEY to read files or execute permitted operating system commands with the privileges of the victim's user.

Recommendations Update to version 3.0.8.