CVE-2026-46414: Microsoft UFO WebSocket role spoofing allows authenticated peer task hijacking

Synopsis

This is an authentication bypass and role-spoofing vulnerability in the Microsoft UFO open-source intelligent automation framework, specifically in its WebSocket control plane at version 3.0.1-4-ge2626659. An attacker who already holds a valid shared server token can connect as a normal device and then send crafted task messages that falsely claim a higher-privilege constellation role, because the server trusts identity and role fields supplied in the wire message rather than enforcing the role recorded at connection time. Successful exploitation lets the attacker dispatch arbitrary attacker-controlled tasks to any other connected device, and also overwrite a legitimate client's registration by re-using its client_id. HarborGuard is tracking this advisory and will make a patched-image rebuild available as soon as an upstream fix is published.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the UFO WebSocket control plane over the network to establish a client connection.

• AuthenticationRequired

  Any low-privilege account holding the shared server token is sufficient to open a WebSocket connection and send spoofed role messages.

• Victim interactionNot required

  No action is needed from the target device or any other user; the attacker sends crafted messages directly to the server.

• Attack complexityDetail

  The exploit is reliable and condition-free: crafting a TASK message with the desired role and target fields requires no race condition or special environmental setup.

Blast Radius

• Reads task state, device identifiers, and any data returned by tasks running on peer devices, since the spoofed constellation role grants visibility across connected clients.
• Dispatches arbitrary attacker-controlled tasks to any connected device, allowing execution of commands or automation actions on victim endpoints.
• Overwrites a legitimate client's registered WebSocket, role, and task protocol by re-registering with the same client_id, effectively hijacking that client's identity and cutting off its legitimate connection.
• Disrupts service for the overwritten client, which loses its session and any in-progress task coordination.