Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-105793— Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`

Quick assessment

Affected
microsoft UFO
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft UFO 是一个跨设备和平台的开源智能自动化框架。在版本 3.0.9 之前，ufo/client/mcp/http_servers/mobile_mcp_server.py 中的 press_key 工具接受自由格式的 key_code 参数，并将其传递给 命令。ADB 客户端会将这些参数拼接为远程命令字符串，由 Android shell 重新解析，从而导致经过身份验证的 Mobile MCP 调用者能够在已授权连接的设备上，以 Android shell 用户身份执行额外命令。 利用此漏洞需要

CVSS 9.1 · Critical
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-105793

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`
Source: CVE Program / CVE List V5
Vulnerability Description
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo/client/mcp/http_servers/mobile_mcp_server.py accepts a free-form key_code parameter and passes it to `adb shell input keyevent`. The adb client joins the arguments into a remote command string that the Android shell reparses, allowing an authenticated Mobile MCP caller to execute additional commands as the Android shell user on an authorized connected device. Exploitation requires a valid UFO_MCP_API_KEY, adb on the host, and a reachable authorized device, and it does not establish host operating-system execution, Android root execution, or access beyond the Android shell-user privileges. This issue is fixed in version 3.0.9.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
microsoft UFO < 3.0.9 -

II. Public POCs for CVE-2026-105793

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-105793

请登录查看更多情报信息。

Other References for CVE-2026-105793 (3)

Same Patch Batch · microsoft · 2026-10-06 · 11 CVEs total

CVE-2026-105794 9.1 CRITICAL MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL
CVE-2026-105797 8.8 HIGH SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spaw
CVE-2026-105796 8.8 HIGH Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP gene
CVE-2026-105788 8.8 HIGH Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and l
CVE-2026-105798 8.7 HIGH SimpleChat: Stored XSS via group document filename in inline onclick handler
CVE-2026-105791 7.5 HIGH Microsoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injecti
CVE-2026-105792 6.5 MEDIUM Microsoft UFO: Authenticated task-result request can deadlock UFO server session manager
CVE-2026-105790 6.4 MEDIUM Microsoft UFO: Authenticated Galaxy device registration can bypass WebSocket SSRF IP pinni
CVE-2026-105789 5.4 MEDIUM Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` tool
CVE-2026-105795 3.1 LOW Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests

IV. Related Vulnerabilities

Same product: UFO
Same vendor: microsoft
Same weakness: CWE-78

V. Comments for CVE-2026-105793

No comments yet

Leave a comment