CVE-2026-73296: Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, createmobiledatacollectionserver and createmobileactionserver in ufo/client/mcp/httpservers/mobilemcpserver.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capturescreenshot, getuitree, tap, swipe, typetext, launchapp, presskey, and clickcontrol against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Microsoft UFO (ufo/client/mcp/http_servers/mobile_mcp_server.py)to a version that resolves this vulnerability.Fixed in 3.0.8
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73296?
The severity of CVE-2026-73296 is critical with a CVSS score of 9.4.
How do I fix CVE-2026-73296?
To fix CVE-2026-73296, update Microsoft UFO to version 3.0.8 or later.
What are the risks associated with CVE-2026-73296?
CVE-2026-73296 allows unauthenticated remote control of Android devices and possible disclosure of the screen.
Which systems are affected by CVE-2026-73296?
CVE-2026-73296 affects versions of Microsoft UFO prior to 3.0.8.
What services are exposed in CVE-2026-73296?
CVE-2026-73296 exposes Streamable HTTP MCP services on TCP ports 8020 and 8021.