{"id":"CVE-2026-73296","aliases":["EUVD-2026-57323","GHSA-24fq-m9rr-g3mm"],"status":"published","title":"Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure","description":"Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.","severity":{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.03652,"percentile":0.89687,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-306","CWE-862"],"published":"2026-08-12T16:29:03Z","modified":"2026-10-28T02:30:56Z","exploits":[{"source":"pocgithub","id":"ashrafzaryouh/CVE-2026-73296","title":"ashrafzaryouh/CVE-2026-73296","date":"2026-09-02","url":"https://github.com/ashrafzaryouh/CVE-2026-73296"}],"products":[{"vendor":"microsoft","product":"ufo"}],"references":[{"url":"https://github.com/microsoft/UFO/security/advisories/GHSA-24fq-m9rr-g3mm","tags":["x_refsource_CONFIRM","exploit","advisory"]},{"url":"https://github.com/microsoft/UFO/commit/e562d10060b077dedae93e0fd58c1ee379558962","tags":["x_refsource_MISC","fix"]},{"url":"https://github.com/microsoft/UFO/releases/tag/v3.0.8","tags":["x_refsource_MISC","web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73296.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73296","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-73296","title":"Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure","description":"Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.","status":"published","published":"2026-08-12T16:29:03.154Z","modified":"2026-08-13T14:07:14.159Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical","assessor":"cna"}],"cwes":["CWE-306","CWE-862"],"updated_at":"2026-11-02T13:43:33.766176Z"}],"euvd":[{"id":"EUVD-2026-57323","description":"Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.","status":"published","published":"2026-08-12T16:29:03Z","modified":"2026-08-13T14:07:14Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"updated_at":"2026-11-02T18:01:56.761721Z"}],"nvd":[{"id":"CVE-2026-73296","description":"Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.","status":"published","published":"2026-08-12T17:17:32.78Z","modified":"2026-10-24T15:10:00.19Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical","assessor":"secondary"}],"cwes":["CWE-306","CWE-862"],"updated_at":"2026-11-02T14:12:37.217486Z"}],"osv":[{"id":"CVE-2026-73296","title":"Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure","description":"Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.","status":"published","published":"2026-08-12T16:29:03.154Z","modified":"2026-10-28T02:30:56.321014461Z","cvss":[{"version":"3.1","score":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"critical"}],"cwes":["CWE-306","CWE-862"],"updated_at":"2026-11-02T15:45:16.365946Z"}]}}