CVE-2026-73296
Received Received - Intake

Microsoft UFO Framework Remote Code Execution

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: GitHub, Inc.

Description
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-12
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-73296
EUVD
EUVD-2026-57323

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
microsoft ufo to 3.0.8 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Microsoft UFO, an open-source framework for automation. Before version 3.0.8, two HTTP servers exposed sensitive Android device functionality over TCP ports 8020 and 8021 without authentication. Attackers could remotely control ADB-connected Android devices, capture screenshots, view UI hierarchy, inject inputs like taps or text, and modify device state without any authentication.

Detection Guidance

Check if TCP ports 8020 or 8021 are open and listening on your system. Use commands like 'netstat -tulnp | grep -E "8020|8021"' or 'ss -tulnp | grep -E "8020|8021"' to identify active services. Verify if the Mobile MCP servers are running without authentication by inspecting process logs or environment variables.

Impact Analysis

An unauthenticated attacker could access sensitive data like screenshots or device information, manipulate the device by sending fake inputs, or install unauthorized apps. This could lead to data theft, device misuse, or unauthorized actions on connected Android devices.

Mitigation Strategies

Upgrade to UFO version 3.0.8 or later. Set the UFO_MCP_API_KEY environment variable to enable bearer token authentication for ports 8020 and 8021. Ensure TLS or trusted private tunnels are used for non-loopback deployments. Block external access to ports 8020 and 8021 if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73296. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart