Skip to main content

Microsoft UFO CVE-2026-73296

| EUVDEUVD-2026-57323 CRITICAL
Missing Authentication for Critical Function (CWE-306)
2026-08-12 GitHub_M
Google Authentication Bypass Microsoft Ufo
9.4
CVSS 3.1 · Vendor: GitHub_M
Share

Severity by source

Vendor (GitHub_M) PRIMARY
9.4 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
vuln.today AI
9.4 CRITICAL

Network-reachable MCP ports with no auth (AV:N/AC:L/PR:N/UI:N); full data disclosure and device manipulation give C:H/I:H, with limited disruption A:L and no scope change.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
Low

Lifecycle Timeline

4
Patch available
Aug 12, 2026 - 17:17 EUVD
Source Code Evidence Fetched
Aug 12, 2026 - 17:06 vuln.today
Analysis Generated
Aug 12, 2026 - 17:06 vuln.today
CVE Published
Aug 12, 2026 - 16:29 cve.org
CRITICAL 9.4

DescriptionCVE.org

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.

AnalysisAI

Missing authentication in Microsoft UFO's mobile MCP servers lets an unauthenticated remote attacker fully control an ADB-connected Android device before version 3.0.8. The create_mobile_data_collection_server and create_mobile_action_server components bind Streamable HTTP MCP services to TCP 8020 and 8021 with no credential check, exposing tools such as capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control to anyone who can reach the ports. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Scan LAN for open ports 8020/8021
Delivery
Connect to unauthenticated MCP endpoint
Exploit
Call get_ui_tree and capture_screenshot
Execution
Invoke tap/type_text/launch_app on device
Impact
Exfiltrate screen data and alter device state
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires network reachability to the UFO Mobile MCP HTTP servers on TCP 8020 (data collection) and/or 8021 (action) while running a version prior to 3.0.8, and an Android device connected to that server via ADB for the device-facing tools to have effect. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The signals align toward genuine high priority: the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) describes a network-reachable, low-complexity, unauthenticated attack with no user interaction, and CWE-306 means there is literally no auth barrier to overcome once the port is reachable. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker on the same LAN (or able to reach an internet-exposed host) scans for open TCP 8020/8021, connects to the unauthenticated MCP endpoint, and calls get_ui_tree and capture_screenshot to harvest on-screen data including any displayed credentials or messages. They then chain tap, type_text, launch_app, and press_key to drive the ADB-connected Android device - opening apps, exfiltrating data, or altering device state - with no credentials and no user interaction. …
Remediation Vendor-released patch: upgrade to Microsoft UFO 3.0.8 (https://github.com/microsoft/UFO/releases/tag/v3.0.8), which requires bearer authentication on both mobile MCP servers via the UFO_MCP_API_KEY environment variable and fails the servers closed when it is unset. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, identify all systems running Microsoft UFO versions prior to 3.0.8 and confirm whether ports 8020 and 8021 are accessible from untrusted networks. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Ufo

View all
CVE-2026-62316 HIGH
8.8 Aug 21

DNS rebinding against Microsoft UFO's Linux MCP server (all versions prior to 3.0.8) enables an attacker-controlled web

CVE-2026-73297 MEDIUM
6.9 Aug 12

Server-side request forgery in Microsoft UFO's URL validation layer allows unauthenticated remote attackers to bypass th
CVE-2026-55440 MEDIUM
6.5 Jul 16

Session-squatting and memory exhaustion in Microsoft UFO's WebSocket server allow any authenticated client to permanentl
CVE-2026-54568 MEDIUM
4.3 Jul 16

Cross-device system_info disclosure in Microsoft UFO's WebSocket server allows any authenticated DEVICE-role client to r

Same weakness CWE-306 – Missing Authentication for Critical Function

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2017-10271 HIGH POC
7.5
CVE-2025-3248 CRITICAL POC
9.8
CVE-2024-11680 CRITICAL POC
9.8
CVE-2024-51567 CRITICAL POC
9.8
CVE-2025-0108 HIGH POC
8.8
CVE-2025-32433 CRITICAL POC
10.0
CVE-2016-2004 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-73296 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy