Reported by 2 outlets
Critical Microsoft UFO MCP Flaw Lets Unauthenticated Attackers Remotely Control Android Devices
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.60 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Critical Microsoft UFO MCP Flaw Lets Unauthenticated Attackers Remotely Control Android Devices
cyberpress.org · 43d ago · August 31st, 2026
A critical vulnerability in Microsoft’s UFO agentic automation framework exposes Android devices to a complete, unauthenticated remote takeover. Tracked as CVE-2026-73296 with a CVSS score of 9.4, the flaw affects UFO versions up to and including v3.0.7, with no patched version currently available. The vulnerability resides in the Mobile MCP ( Model Context Protocol ) implementation at ufo/client/mcp/http_servers/mobile_mcp_server.py , where two Streamable HTTP servers a data-collection server on port 8020 and an action server on port 8021 are constructed without any authentication provider or authorization check. Critical Microsoft UFO MCP Flaw When deployed per Microsoft’s own documented remote configuration, which binds these services to 0.0.0.0, any network client capable of reaching the ports can initiate an MCP session and invoke ADB-backed tools without an API key, session token, or user approval. Once a request reaches the server, it flows directly into privileged ADB subprocess calls with no gatekeeping. On the data side, attackers can call capture_screenshot , get_ui_tree , get_device_info , and related functions to exfiltrate screen contents, UI hierarchy, installed apps, and device metadata . On the action side, functions including tap , swipe , type_text , launch_app , press_key , and click_control let an attacker inject arbitrary input events into a connected Android device. Researcher rhmsd demonstrated this with a proof-of-concept replacing the real ADB binary
-
update from gbhackers.com
Critical Microsoft UFO MCP Flaw Lets Attackers Remotely Control Android Devices Without Authentication
gbhackers.com · 43d ago · August 31st, 2026
A critical vulnerability in Microsoft’s open-source UFO Desktop AgentOS could allow remote attackers to access and control Android devices connected via the platform’s Mobile Model Context Protocol (MCP) servers without requiring authentication. This vulnerability is tracked as CVE-2026-73296 and GHSA-24fq-m9rr-g3mm, carrying a CVSS v3.1 score of 9.4. It affects UFO versions up to and including […] The post Critical Microsoft UFO MCP Flaw Lets Attackers Remotely Control Android Devices Without Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .