Command Injection in adb-mcp MCP Server

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-59834 · Microsoft / collected KEV context

EUVD-2025-31042

GHSA-54j7-grvr-9xwg

cve-program · CVE-2025-59834

• https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg
• https://github.com/srmorete/adb-mcp/commit/041729c0b25432df3199ff71b3163a307cf4c28c
• https://github.com/srmorete/adb-mcp/blob/master/src/index.ts#L334-L355

euvd · EUVD-2025-31042

• https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg
• https://github.com/srmorete/adb-mcp/commit/041729c0b25432df3199ff71b3163a307cf4c28c
• https://github.com/srmorete/adb-mcp/blob/master/src/index.ts#L334-L355

nvd · CVE-2025-59834

• https://github.com/srmorete/adb-mcp/blob/master/src/index.ts#L334-L355
• https://github.com/srmorete/adb-mcp/commit/041729c0b25432df3199ff71b3163a307cf4c28c
• https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg

osv · GHSA-54j7-grvr-9xwg

• https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg
• https://nvd.nist.gov/vuln/detail/CVE-2025-59834
• https://github.com/srmorete/adb-mcp/commit/041729c0b25432df3199ff71b3163a307cf4c28c
• https://github.com/srmorete/adb-mcp
• https://github.com/srmorete/adb-mcp/blob/master/src/index.ts#L334-L355

No related operational record is retained in the current change model.