Is CVE-2026-62316 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-62316 being exploited in the wild.

How severe is CVE-2026-62316?

High severity, with a CVSS score of 8.8, published 21 August 2026.

Is there a fix for CVE-2026-62316?

A patch was published on 2026-08-10: Fixed in version 3.0.8 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-62316 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-62316?

Check whether you run Microsoft UFO at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-62316: Microsoft UFO DNS rebinding bypass leading to file read and command execution

CVE-2026-62316 · Severity: high · CVSS 8.8 · Published 2026-08-21

Microsoft UFO is an open-source intelligent automation framework that runs a local HTTP server for executing system commands and file operations. Prior to version 3.0.8, the server fails to validate request headers, allowing an attacker-controlled web page to bypass origin restrictions via DNS rebinding, enumerate available operations, and execute arbitrary file reads or OS commands using a valid API key. This could lead to unauthorized access to sensitive files and system compromise.

Technologies: Microsoft UFO. Vendors: Microsoft.

Quick answers

Is CVE-2026-62316 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-62316 being exploited in the wild.
How severe is CVE-2026-62316?: High severity, with a CVSS score of 8.8, published 21 August 2026.
Which products and versions are affected?: Microsoft UFO prior to 3.0.8.
Is there a fix for CVE-2026-62316?: A patch was published on 2026-08-10: Fixed in version 3.0.8 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-62316 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-62316?: Check whether you run Microsoft UFO at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a DNS rebinding attack combined with missing Host/Origin/Sec-Fetch-Site header validation in the FastMCP HTTP server (linux_mcp_server.py) listening on localhost:8010. An attacker can host a malicious web page that performs DNS rebinding to reach the local /mcp endpoint, call tools/list to enumerate available command schemas, and invoke execute_command with a valid UFO_MCP_API_KEY to read arbitrary files or execute whitelisted OS commands as the authenticated user. The attack requires either knowledge of a valid UFO_MCP_API_KEY or exploitation of a related authentication bypass. This issue is fixed in version 3.0.8 by implementing proper header validation and per-command argument policies.

Affected products

Microsoft UFO prior to 3.0.8

Timeline

2026-08-21: disclosed
2026-08-10: patched: Fixed in version 3.0.8

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.