CVE-2026-105788

Name of the Vulnerable Software and Affected Versions Microsoft UFO versions prior to 3.0.10

Description In the ufo/client/mcp/http servers/mobile mcp server.py file, the type text and launch app tools fail to comprehensively validate the text and package name parameters provided by an authenticated caller. These parameters are passed into adb shell command argument positions, which the adb client joins into a remote command string. Because the Android shell reparses this string, shell metacharacters can be used to execute additional commands on an authorized connected device with Android shell user privileges. Exploitation requires a valid Mobile MCP API key and a reachable device authorized for ADB. This issue does not grant host operating-system execution, Android root execution, or privileges beyond those of the Android shell user.

Recommendations Update to version 3.0.10.