CVE-2026-62316 | Microsoft UFO up to 3.0.7 Linux MCP Server linux_mcp_server.py execute_command dns rebinding

A vulnerability categorized as problematic has been discovered in Microsoft UFO up to 3.0.7. Affected is the function execute_command of the file ufo/client/mcp/http_servers/linux_mcp_server.py of the component Linux MCP Server. The manipulation results in reliance on reverse dns resolution.

This vulnerability is identified as CVE-2026-62316. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More