CVE-2026-33989

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-33989", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-03-24T22:20:06.211Z", "datePublished": "2026-03-27T22:03:01.801Z", "dateUpdated": "2026-03-30T15:47:00.925Z"}, "containers": {"cna": {"title": "@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-73", "lang": "en", "description": "CWE-73: External Control of File Name or Path", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx"}, {"name": "https://github.com/mobile-next/mobile-mcp/commit/f5e32295903128c1e71cf915ae6c0b76c7b0153b", "tags": ["x_refsource_MISC"], "url": "https://github.com/mobile-next/mobile-mcp/commit/f5e32295903128c1e71cf915ae6c0b76c7b0153b"}, {"name": "https://github.com/mobile-next/mobile-mcp/releases/tag/0.0.49", "tags": ["x_refsource_MISC"], "url": "https://github.com/mobile-next/mobile-mcp/releases/tag/0.0.49"}], "affected": [{"vendor": "mobile-next", "product": "mobile-mcp", "versions": [{"version": "< 0.0.49", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-27T22:03:01.801Z"}, "descriptions": [{"lang": "en", "value": "Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mobile_save_screenshot` and `mobile_start_screen_recording` tools. The `saveTo` and `output` parameters were passed directly to filesystem operations without validation, allowing an attacker to write files outside the intended workspace. Version 0.0.49 fixes the issue."}], "source": {"advisory": "GHSA-3p2m-h2v6-g9mx", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-30T15:46:47.644516Z", "id": "CVE-2026-33989", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-30T15:47:00.925Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-33989", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-30T15:46:47.644516Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-30T15:46:54.514Z"}}], "cna": {"title": "@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools", "source": {"advisory": "GHSA-3p2m-h2v6-g9mx", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "mobile-next", "product": "mobile-mcp", "versions": [{"status": "affected", "version": "< 0.0.49"}]}], "references": [{"url": "https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx", "name": "https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/mobile-next/mobile-mcp/commit/f5e32295903128c1e71cf915ae6c0b76c7b0153b", "name": "https://github.com/mobile-next/mobile-mcp/commit/f5e32295903128c1e71cf915ae6c0b76c7b0153b", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/mobile-next/mobile-mcp/releases/tag/0.0.49", "name": "https://github.com/mobile-next/mobile-mcp/releases/tag/0.0.49", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mobile_save_screenshot` and `mobile_start_screen_recording` tools. The `saveTo` and `output` parameters were passed directly to filesystem operations without validation, allowing an attacker to write files outside the intended workspace. Version 0.0.49 fixes the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-73", "description": "CWE-73: External Control of File Name or Path"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-27T22:03:01.801Z"}}}, "cveMetadata": {"cveId": "CVE-2026-33989", "state": "PUBLISHED", "dateUpdated": "2026-03-30T15:47:00.925Z", "dateReserved": "2026-03-24T22:20:06.211Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-27T22:03:01.801Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "mobile-mcp", "vendor": "mobile-next", "versions": [{"status": "affected", "version": "< 0.0.49"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mobilenexthq:mobile_mcp:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "BE5CFF3D-EA63-4D6D-97F5-287A5C4DCFFB", "versionEndExcluding": "0.0.49", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mobile_save_screenshot` and `mobile_start_screen_recording` tools. The `saveTo` and `output` parameters were passed directly to filesystem operations without validation, allowing an attacker to write files outside the intended workspace. Version 0.0.49 fixes the issue."}, {"lang": "es", "value": "Mobile Next es un servidor MCP para desarrollo y automatizaci\u00f3n m\u00f3vil. Antes de la versi\u00f3n 0.0.49, el servidor \u201c@mobilenext/mobile-mcp\u201d contiene una vulnerabilidad de salto de ruta en las herramientas \u201cmobile_save_screenshot\u201d y \u201cmobile_start_screen_recording\u201d. Los par\u00e1metros \u201csaveTo\u201d y \u201coutput\u201d se pasaban directamente a operaciones del sistema de archivos sin validaci\u00f3n, permitiendo a un atacante escribir archivos fuera del espacio de trabajo previsto. La versi\u00f3n 0.0.49 soluciona el problema."}], "id": "CVE-2026-33989", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33989", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-30T15:46:47.644516Z", "version": "2.0.3"}}]}, "published": "2026-03-27T22:16:22.950", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/mobile-next/mobile-mcp/commit/f5e32295903128c1e71cf915ae6c0b76c7b0153b"}, {"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/mobile-next/mobile-mcp/releases/tag/0.0.49"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-73"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.0.49)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "mobile-mcp", "source": "cna", "vendor": "mobile-next"}, "product": "mobile-mcp", "vendor": "mobile-next"}], "analysis": {"en": {"generated_at": "2026-04-01T07:00:28.721810+00:00", "value": {"mitigation_remediation": ["Upgrade to mobile-mcp version 0.0.49 or later to eliminate the flaw.", "Ensure the MCP server runs with the least privileges necessary to limit the impact of any file write.", "Restrict network access to the MCP server and enforce authentication on screen capture endpoints.", "Monitor the workspace directory for unexpected file creation or modification as an early warning."], "summary": {"action": "Immediate Patch", "impact": "arbitrary file write leading to potential system compromise"}, "threat_synthesis": {"affected_systems": "Mobile Next's MCP server, known as mobile-mcp, is vulnerable in all releases before version 0.0.49. Deployments running 0.0.48 or earlier expose the screen capture endpoints without path validation, whereas version 0.0.49 and later contain the fix.", "description_and_impact": "The server contains a Path Traversal vulnerability that allows unvalidated use of the `saveTo` and `output` parameters in the mobile screen capture tools. Attackers can supply arbitrary file paths, causing the server to write or overwrite files outside the intended workspace. This could permit the insertion of malicious files or loss of crucial configuration, undermining confidentiality, integrity, and potentially availability of the application.", "risk_and_exploitability": "The CVSS score of 8.1 indicates high severity. The EPSS score below 1% suggests a low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is remote exploitation of the exposed MCP screen capture endpoints; an attacker must reach the server to supply malicious file path parameters. Once exploited, the attacker can write arbitrary files to the server filesystem."}}}}, "created": "2026-03-29T20:29:32.518564+00:00", "updated": "2026-04-02T07:55:18.420969+00:00", "vendors": ["mobile-next", "mobile-next$PRODUCT$mobile-mcp"]}