Microsoft's UFO repository published GitHub security advisory GHSA-24fq-m9rr-g3mm (rated Critical) on 10 August 2026 (05:24 UTC; 1:24 pm Perth) for CVE-2026-73296 in its open-source UFO automation framework.

The advisory says the Mobile Model Context Protocol (MCP) data-collection and action servers, on TCP ports 8020 and 8021, expose ADB-backed Android functionality without authentication, so that when they are run in the documented remote configuration bound to 0.0.0.0, any network client that can reach them can retrieve screenshots, UI hierarchy data and device metadata and inject taps, swipes, text, key events, app launches and control clicks into an ADB-connected device; the default CLI host is localhost. It rates the flaw CVSS 3.1 9.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) under CWE-306 and CWE-862.

The advisory describes a proposed remediation in which both servers require a bearer credential read from UFO_MCP_API_KEY and startup fails closed when the key is absent.

The CVE record (GitHub CNA) says the issue is fixed in UFO 3.0.8, and CISA's enrichment lists proof-of-concept exploitation. Until patched, keep Mobile MCP on localhost and block TCP 8020/8021. (sources: GitHub advisory; CVE record)

Correction (27 Oct 2026): the card now rests on the advisory in Microsoft's UFO repository and the CVE record, not on Cyber Security News, which does not serve its pages to Cyberstack; that link and credit are removed, the advisory link now points at the repository advisory (the global advisory page returned 404), and the description of UFO 3.0.8's authentication change is now given as the advisory states it, a proposed remediation.

The card date has moved from 31 August to 10 August 2026, the Perth date of the advisory. (source: GitHub advisory GHSA-24fq-m9rr-g3mm; CVE.org)