Microsoft UFO’s execute_command tool allows an authenticated caller to invoke read‑only utilities such as sort and uniq with optional output parameters. By supplying the -o option or an optional second operand, the caller can create or overwrite files that are writable by the UFO server process. This grants the ability to corrupt configuration files or other writable data but does not expose file content disclosure or arbitrary code execution capabilities.

The vulnerability exists in Microsoft UFO versions prior to 3.0.9. Systems running the Linux MCP execute_command component located in ufo/client/mcp/http_servers/linux_mcp_server.py are affected. Only installations that enable the authenticate‑required execute_command endpoint and allow the use of sort or uniq commands are impacted.

The CVSS score is 5.4, indicating moderate severity. EPSS data is not available and the vulnerability has not been cataloged in CISA KEV. Exploitation requires valid credentials to access the execute_command API, making it an authenticated attack vector. An attacker with these credentials can manipulate writable files, potentially disrupting service or tampering with configuration, but cannot retrieve data or execute arbitrary code directly.