CVE-2026-45322

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45322", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-11T20:50:30.539Z", "datePublished": "2026-05-27T21:32:50.171Z", "dateUpdated": "2026-05-28T13:21:51.736Z"}, "containers": {"cna": {"title": "OS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSON", "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "lang": "en", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f"}], "affected": [{"vendor": "microsoft", "product": "UFO", "versions": [{"version": "<= 3.0.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-27T21:32:50.171Z"}, "descriptions": [{"lang": "en", "value": "Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.run_shell() passes a command string from action parameters directly to subprocess.Popen() with shell=True and executable=powershell.exe. The same shell-execution behavior is also reachable through ShellReceiver.execute_command(). The shell receiver is invoked by action classes such as RunShellCommand.execute() and ExecuteCommand.execute(), which forward stored action parameters to the shell receiver. Because UFO stores planned and executed actions in per-session JSON records, an attacker who can write or modify a session/action JSON file can plant a shell action. When the session is resumed or replayed, UFO executes the attacker's command as the UFO process user."}], "source": {"advisory": "GHSA-wj72-7w8h-695f", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-28T13:21:09.646294Z", "id": "CVE-2026-45322", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-28T13:21:51.736Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-45322", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-05-28T13:21:09.646294Z"}}}], "references": [{"url": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-28T13:21:25.663Z"}}], "cna": {"title": "OS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSON", "source": {"advisory": "GHSA-wj72-7w8h-695f", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "microsoft", "product": "UFO", "versions": [{"status": "affected", "version": "<= 3.0.0"}]}], "references": [{"url": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f", "name": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.run_shell() passes a command string from action parameters directly to subprocess.Popen() with shell=True and executable=powershell.exe. The same shell-execution behavior is also reachable through ShellReceiver.execute_command(). The shell receiver is invoked by action classes such as RunShellCommand.execute() and ExecuteCommand.execute(), which forward stored action parameters to the shell receiver. Because UFO stores planned and executed actions in per-session JSON records, an attacker who can write or modify a session/action JSON file can plant a shell action. When the session is resumed or replayed, UFO executes the attacker's command as the UFO process user."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-27T21:32:50.171Z"}}}, "cveMetadata": {"cveId": "CVE-2026-45322", "state": "PUBLISHED", "dateUpdated": "2026-05-28T13:21:51.736Z", "dateReserved": "2026-05-11T20:50:30.539Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-05-27T21:32:50.171Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "UFO", "vendor": "microsoft", "versions": [{"status": "affected", "version": "<= 3.0.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Microsoft UFO open-source framework for intelligent automation across devices and platforms. Microsoft UFO tagged releases up to and including v3.0.0 contain an OS command injection vulnerability in the shell action replay path. In affected releases, ShellReceiver.run_shell() passes a command string from action parameters directly to subprocess.Popen() with shell=True and executable=powershell.exe. The same shell-execution behavior is also reachable through ShellReceiver.execute_command(). The shell receiver is invoked by action classes such as RunShellCommand.execute() and ExecuteCommand.execute(), which forward stored action parameters to the shell receiver. Because UFO stores planned and executed actions in per-session JSON records, an attacker who can write or modify a session/action JSON file can plant a shell action. When the session is resumed or replayed, UFO executes the attacker's command as the UFO process user."}, {"lang": "es", "value": "Microsoft UFO, un framework de c\u00f3digo abierto para automatizaci\u00f3n inteligente en todos los dispositivos y plataformas. Las versiones etiquetadas de Microsoft UFO hasta e incluyendo la v3.0.0 contienen una vulnerabilidad de inyecci\u00f3n de comandos del sistema operativo en la ruta de repetici\u00f3n de acciones de shell. En las versiones afectadas, ShellReceiver.run_shell() pasa una cadena de comandos de los par\u00e1metros de acci\u00f3n directamente a subprocess.Popen() con shell=True y executable=powershell.exe. El mismo comportamiento de ejecuci\u00f3n de shell tambi\u00e9n es alcanzable a trav\u00e9s de ShellReceiver.execute_command(). El receptor de shell es invocado por clases de acci\u00f3n como RunShellCommand.execute() y ExecuteCommand.execute(), que reenv\u00edan los par\u00e1metros de acci\u00f3n almacenados al receptor de shell. Debido a que UFO almacena acciones planificadas y ejecutadas en registros JSON por sesi\u00f3n, un atacante que puede escribir o modificar un archivo JSON de sesi\u00f3n/acci\u00f3n puede plantar una acci\u00f3n de shell. Cuando la sesi\u00f3n se reanuda o se reproduce, UFO ejecuta el comando del atacante como el usuario del proceso de UFO."}], "id": "CVE-2026-45322", "lastModified": "2026-10-26T12:10:00.130", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45322", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-05-28T13:21:09.646294Z", "version": "2.0.3"}}]}, "published": "2026-05-27T23:16:47.313", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/microsoft/UFO/security/advisories/GHSA-wj72-7w8h-695f"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.0.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "ufo", "vendor": "microsoft"}], "created": "2026-05-27T23:30:45.638892+00:00", "updated": "2026-06-18T13:00:16.345018+00:00", "vendors": ["microsoft", "microsoft$PRODUCT$ufo"]}