What happened
Microsoft's UFO open-source framework for intelligent automation across devices exposes create_mobile_data_collection_server and create_mobile_action_server functions (ufo/client/mcp/http_servers/mobile_mcp_server.py) that stand up Streamable HTTP MCP services on TCP ports 8020/8021 without authentication (CVE-2026-73296, CVSS 9.4, Critical), prior to version 3.0.8.
Why it matters
UFO is an MCP-based agentic automation framework from Microsoft; unauthenticated MCP servers bound to network-reachable ports allow any network-adjacent attacker to invoke device-automation tool calls (including mobile action execution) without credentials, a direct agent-tool-execution compromise path.
Attack vector
Attacker connects directly to unauthenticated MCP service on TCP port 8020/8021 and invokes mobile data-collection or mobile-action tool calls without any credential check
Affected systems
Microsoft UFO < 3.0.8
Mitigation
Upgrade to UFO 3.0.8 or later