{"id":"EUVD-2026-16882","enisaUuid":"d9a4c088-5478-3444-88ff-41810571501f","description":"Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mobile_save_screenshot` and `mobile_start_screen_recording` tools. The `saveTo` and `output` parameters were passed directly to filesystem operations without validation, allowing an attacker to write files outside the intended workspace. Version 0.0.49 fixes the issue.","datePublished":"Mar 27, 2026, 10:03:01 PM","dateUpdated":"Mar 30, 2026, 3:47:00 PM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","references":"https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx\nhttps://github.com/mobile-next/mobile-mcp/commit/f5e32295903128c1e71cf915ae6c0b76c7b0153b\nhttps://github.com/mobile-next/mobile-mcp/releases/tag/0.0.49\n","aliases":"CVE-2026-33989\nGHSA-3p2m-h2v6-g9mx\n","assigner":"GitHub_M","epss":0.5,"enisaIdProduct":[{"id":"cd7f0d7d-10cc-3be4-b5e5-35c7d7d4ecfc","product":{"name":"mobile-mcp","vendor":{"name":"mobile-next"}},"product_version":"\u003c 0.0.49"}],"enisaIdVendor":[{"id":"ea50cc2c-c8b8-3838-b469-2a7e9e12dd61","vendor":{"name":"mobile-next"}}],"enisaIdVulnerability":[{"id":"5bdec6d0-4a5a-363f-8550-0f04087e4f6c","vulnerability":{"id":"CVE-2026-33989","description":"Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mobile_save_screenshot` and `mobile_start_screen_recording` tools. The `saveTo` and `output` parameters were passed directly to filesystem operations without validation, allowing an attacker to write files outside the intended workspace. Version 0.0.49 fixes the issue.","datePublished":"Mar 27, 2026, 10:03:01 PM","dateUpdated":"Mar 30, 2026, 3:47:00 PM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","references":"https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx\nhttps://github.com/mobile-next/mobile-mcp/commit/f5e32295903128c1e71cf915ae6c0b76c7b0153b\nhttps://github.com/mobile-next/mobile-mcp/releases/tag/0.0.49\n","enisa_id":"EUVD-2026-16882\n","assigner":"GitHub_M","epss":0.5,"dataProcessed":"Nov 1, 2026, 7:18:59 AM","vulnerabilityProduct":[{"id":"67229fb7-aed9-3fc7-8c56-0b625a24463a","product":{"name":"mobile-mcp","vendor":{"name":"mobile-next"}},"product_version":"\u003c 0.0.49"}],"vulnerabilityVendor":[{"id":"0da9ed2a-5a08-32f9-8174-75f9db9447dc","vendor":{"name":"mobile-next"}}]}},{"id":"92b35237-219d-3976-b0af-fb4245c63b04","vulnerability":{"id":"GHSA-3p2m-h2v6-g9mx","description":"@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools","datePublished":"Mar 27, 2026, 7:13:17 PM","dateUpdated":"Mar 30, 2026, 8:18:39 PM","baseScore":0.0,"references":"https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-33989\nhttps://github.com/mobile-next/mobile-mcp/commit/f5e32295903128c1e71cf915ae6c0b76c7b0153b\nhttps://github.com/mobile-next/mobile-mcp\nhttps://github.com/mobile-next/mobile-mcp/releases/tag/0.0.49\n","enisa_id":"EUVD-2026-16882\n","aliases":"GHSA-3p2m-h2v6-g9mx\nCVE-2026-33989\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:58:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}