Skip to content
OpenAdvisories

Vendor

mobile-next

2 known vulnerabilities.

Products

mobile-mcp 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-35394

    Mobile Next has Arbitrary Android Intent Execution via mobile_open_url

    Mobile Next is an MCP server for mobile development and automation. Prior to 0.0.50, the mobile_open_url tool in mobile-mcp passes user-supplied URLs directly to Android's intent system without any scheme validation, allowing execution of arbitrary Android in…

    mobile-next mobile-mcp @mobilenext/mobile-mcp npm
  • High 8.1
    CVE-2026-33989

    @mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools

    Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mobile_save_screenshot` and `mobile_start_screen_recording` tools. The `saveTo` an…

    mobile-next mobile-mcp @mobilenext/mobile-mcp npm