CVE-2026-45322: Microsoft UFO OS command injection in shell action replay

CVE-2026-45322 · Severity: high · CVSS 7.8 · Published 2026-05-27

Microsoft UFO is an open-source framework used for automating tasks across different devices and platforms. A security flaw in how the framework handles saved automation sessions allows an attacker to execute malicious commands on a user's computer. If an attacker can modify a saved session file, the malicious commands will run automatically when a user later resumes or replays that session, potentially leading to full system compromise or data theft.

Technologies: Microsoft UFO. Vendors: Microsoft.

Quick answers

Is CVE-2026-45322 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-45322 being exploited in the wild.
How severe is CVE-2026-45322?
High severity, with a CVSS score of 7.8, published 27 May 2026.
Which products and versions are affected?
Microsoft UFO <= v3.0.0.
Is there a fix for CVE-2026-45322?
A patch was published on 2026-03-25: Silent hardening committed to main branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-45322 attacked?
It is attacked with local access, in a software library.
Am I affected by CVE-2026-45322?
Check whether you run Microsoft UFO at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An OS command injection vulnerability exists in Microsoft UFO releases up to and including v3.0.0 within the shell action replay mechanism. The root cause is located in `ShellReceiver.run_shell()` and `ShellReceiver.execute_command()`, which pass unsanitized command strings from action parameters directly to `subprocess.Popen()` with `shell=True` and `executable=powershell.exe`. Because UFO stores planned actions in per-session JSON records, an attacker with local file system access can modify these records to include malicious payloads. When a victim resumes or replays the poisoned session, the `RunShellCommand` or `ExecuteCommand` classes forward the malicious parameters to the shell receiver, resulting in arbitrary code execution as the UFO process user. While the main branch was hardened in March 2026, no patched tagged release was available at the time of disclosure.

Affected products

  • Microsoft UFO <= v3.0.0

Timeline

  • 2026-03-25: patched: Silent hardening committed to main branch
  • 2026-05-08: advisory: GitHub security advisory published
  • 2026-05-27: disclosed: CVE published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.