Azure SQL scores a perfect 10, GeoTools SQLi hits 9.8, and UFO opens a backdoor on localhost

The BOSH CLI tool on Windows has a command injection bug that lets a remote attacker run arbitrary shell commands. If you use BOSH CLI on Windows to manage Cloud Foundry deployments, an attacker can piggyback OS commands through crafted input.

Affected estate

Cloud Foundry operators using the BOSH CLI on Windows

How to check

Run `bosh --version` on your Windows workstations and jump boxes. Check if you're on a version prior to the fix.

Included because

remote command injection; CVSS 7.5; EPSS 78th percentile suggests higher-than-average exploit likelihood

Action

Upgrade BOSH CLI to the latest release that patches this command injection.

Why it matters

Command injection lets an attacker execute arbitrary commands as the user running BOSH, potentially compromising your entire Cloud Foundry control plane.

Source

Cloud Foundry advisory

An unauthenticated attacker can crash your Unleash server by sending a deeply nested JSON payload (around 10 KB) to any OpenAPI-validated endpoint like /edge/validate. The Node.js process hits a stack overflow, dies, and doesn't recover. Replaying the request keeps the service down for as long as the attacker wants.

Affected estate

Teams running self-hosted Unleash feature flag servers prior to 7.5.2, 7.6.5, or 8.0.2

How to check

Check the Unleash version in your deployment config, Docker image tag, or the /api/admin/instance-admin endpoint.

Included because

unauthenticated; no user interaction; denial of service with sustained outage potential; internet-facing endpoints

Action

Upgrade Unleash to 7.5.2, 7.6.5, or 8.0.2.

Why it matters

Unauthenticated denial of service that can be sustained with trivial replay, taking down your feature flag service and potentially breaking dependent applications.

Source

Unleash GitHub advisory

This is a perfect-10 CVSS SSRF in Azure SQL Database that lets an unauthenticated attacker escalate privileges over the network. Microsoft hasn't shared many details yet, but a 10.0 score with SSRF and privilege escalation means the service-side boundary is being bypassed. This is a managed service, so the fix is mostly on Microsoft's side.

Affected estate

Anyone running Azure SQL Database workloads

How to check

Review the Azure Portal or run `az sql server list` and `az sql server firewall-rule list` to identify databases with public endpoints. Check Microsoft's advisory for specific version or configuration exposure details.

Included because

unauthenticated; CVSS 10.0; SSRF with privilege escalation; cloud service with broad adoption

Action

Follow any Microsoft guidance on customer-side mitigations. Restrict Azure SQL public access, enable Private Link, and tighten firewall rules.

Why it matters

A CVSS 10.0 SSRF with privilege escalation in a managed database service could expose your data or let an attacker pivot within your Azure environment.

Source

Microsoft Security Response Center

Microsoft's UFO automation framework runs a local HTTP server on port 8010 without checking Host, Origin, or Sec-Fetch-Site headers. An attacker can use DNS rebinding from a malicious web page to reach the local /mcp endpoint, list available tools, and run OS commands or read files as your user. This requires the victim to visit a malicious page while UFO's MCP server is running, and the attacker needs a valid UFO_MCP_API_KEY.

Affected estate

Developers and researchers running Microsoft UFO framework prior to 3.0.8 on Linux or other platforms with the MCP HTTP server enabled

How to check

Check your UFO installation version and whether the linux_mcp_server.py process is running. Look for a listener on port 8010 with `ss -tlnp | grep 8010` or `netstat -tlnp | grep 8010`.

Included because

DNS rebinding; CVSS 8.8; local command execution; requires user to visit malicious page but no other interaction

Action

Upgrade UFO to 3.0.8. Alternatively, stop the MCP server process and block port 8010.

Why it matters

DNS rebinding can let a malicious web page execute OS commands as your user, potentially reading sensitive files or compromising dev workstations.

Source

Microsoft UFO GitHub advisory