In the FFX spec, there is a note about using CBC-MAC as the round function.
Security notes. The round function F is constructed in such a way that the set of inputs on which the CBC-MAC is invoked is preﬁx-free. (A set of strings is preﬁx-free if for any distinct x, y in the set, x is not a preﬁx of y.) The CBC-MAC is known to be a good PRF when it is invoked on a set of preﬁx-free inputs, assuming AES is a good PRP .
Why is it important that the input be prefix-free? The citation is for Erez Petrank and Charles Rackoff, ‘CBC MAC for Real-Time Data Sources’, Journal of Cryptology 13(3), 2000, pp. 315–338 (paywall-free, tech report, preprint).