CVE-2026-105792 Microsoft UFO: Authenticated task-result request can deadlock UFO server session manager

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/taskresult/taskname endpoint calls SessionManager.getresultbytask in ufo/server/services/sessionmanager.py, which acquires a non-reentrant lock and then calls...