Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-46486 EUVD-2026-35186GHSA-5h3g-px23-w6vwPYSEC-2026-2671

Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing

Published Jun 8, 2026 · Updated Jun 8, 2026 · Assigned by GitHub_M

Description

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise. Prior to version 2026.5.12, there is a path traversal vulnerability via unsanitized File identifiers in iOS Backup processing. This issue has been patched in version 2026.5.12.

Affected products

VendorProductAffectedFixed
mvt-project mvt < 2026.5.12 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI mvt < 2026.5.12 2026.5.12 GHSA-5h3g-px23-w6vw

References