Microsoft UFO advisory: unauthenticated mobile MCP servers allowed remote control of connected Android devices

Microsoft's UFO project, an open-source framework for intelligent automation across devices and platforms, published security advisory GHSA-24fq-m9rr-g3mm on 2026-08-10, rated critical. The corresponding CVE record, CVE-2026-73296, was published to the National Vulnerability Database on 2026-08-12 with a CVSS score of 9.4.

Prior to version 3.0.8, the functions create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication. An unauthenticated remote attacker who could reach those ports could invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclosing screen and device data and modifying device state.

The issue is fixed in UFO v3.0.8, released the same day as the advisory. Severity here is framed exactly as Microsoft's advisory frames it: critical, with no authentication required.