Microsoft UFO Flaw Exposes Android Devices to Remote Takeover
A critical vulnerability in Microsoft's UFO agentic automation framework has been discovered, allowing unauthenticated attackers to remotely control Android devices. The flaw, tracked as CVE-2026-73296 with a CVSS score of 9.4, affects UFO versions up to and including v3.0.7.
The vulnerability resides in the Mobile MCP (Model Context Protocol) implementation at ufo/client/mcp/http_servers/mobile_mcp_server.py, where two Streamable HTTP servers are constructed without any authentication provider or authorization check.
When deployed per Microsoft's own documented remote configuration, which binds these services to 0.0.0.0, any network client capable of reaching the ports can initiate an MCP session and invoke ADB-backed tools without an API key, session token, or user approval.