# CVE-2026-46544: Microsoft UFO stale result replay via session ID reuse

Source: https://junglewise.ai/threats/cve-2026-46544-microsoft-ufo-stale-result-replay-via-session-id-reuse  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-27. Updated: 2026-05-27  
License: CC BY 4.0 with a link back

CVE-2026-46544 · Severity: medium · CVSS 5.3 · Published 2026-05-27

Microsoft UFO is an open-source framework used for automating tasks across different devices and platforms. A security flaw allows an authenticated user to access the results of another user's previous automation tasks by predicting or knowing their session ID. This could lead to the unauthorized exposure of sensitive data or task results processed by the framework.

Technologies: [Microsoft UFO](https://junglewise.ai/threats/technologies/ufo). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-46544 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-46544 being exploited in the wild.

**How severe is CVE-2026-46544?** Medium severity, with a CVSS score of 5.3, published 27 May 2026.

**Which products and versions are affected?** Microsoft UFO 3.0.1-4-ge2626659.

**Is there a fix for CVE-2026-46544?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-46544 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-46544?** Check whether you run Microsoft UFO at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Microsoft UFO (specifically version 3.0.1-4-ge2626659) is vulnerable to an authenticated cross-client stale result replay. The vulnerability exists because the `SessionManager` reuses existing in-memory session objects if a client-supplied `session_id` matches an existing one, without verifying ownership or device binding. If a session has completed but remains in memory, a different authenticated client can send a WebSocket `TASK` message with that `session_id` to trigger the `send_task_end()` callback, which returns the previous session's results to the new requester. The risk is elevated because some session IDs are derived from predictable application identifiers rather than random server-generated secrets. No patch was available at the time of the advisory.

## Affected products

- Microsoft UFO 3.0.1-4-ge2626659

## Timeline

- 2026-05-15: advisory: GitHub Security Advisory published
- 2026-05-27: disclosed: CVE published to NVD

## References

- [https://github.com/microsoft/UFO/security/advisories/GHSA-29gc-vqjp-7fqf](https://github.com/microsoft/UFO/security/advisories/GHSA-29gc-vqjp-7fqf)

## Related threats

- [Microsoft UFO command injection in Mobile MCP press_key](https://junglewise.ai/threats/cve-2026-105793-microsoft-ufo-is-an-open-source-framework-for-intelligent)
- [Microsoft UFO deadlock in task result endpoint](https://junglewise.ai/threats/cve-2026-105792-microsoft-ufo-is-an-open-source-framework-for-intelligent)
- [Microsoft UFO command injection in run_shell via explorer.exe](https://junglewise.ai/threats/cve-2026-105791-microsoft-ufo-is-an-open-source-framework-for-intelligent)
- [Microsoft UFO WebSocket SSRF IP pinning bypass in device registration](https://junglewise.ai/threats/cve-2026-105790-microsoft-ufo-is-an-open-source-framework-for-intelligent)
- [Microsoft UFO command allowlist bypass in Linux MCP server](https://junglewise.ai/threats/cve-2026-105789-microsoft-ufo-is-an-open-source-framework-for-intelligent)