| عنوان | AlexGladkov claude-in-mobile <= 3.10.2 Fixed in 3.10.3 Command Injection |
|---|
| الوصف | claude-in-mobile before version 3.10.3 contains an OS command injection vulnerability in the system_shell MCP tool. The tool forwards user-controlled input to execSync() using the shell-string form after applying an incomplete denylist validator. The validator blocks common shell metacharacters but fails to reject a standalone &, allowing an attacker to bypass the protection and inject arbitrary host-side commands.
A remote MCP client, prompt-injected LLM agent, or any attacker able to invoke the system_shell tool can execute arbitrary commands on the host running the MCP server with the privileges of the server process. The issue affects developer workstations rather than only attached Android devices because the injected command executes on the host shell before or independently of the adb shell invocation.
The vulnerability is fixed in version 3.10.3 by replacing shell-string execution with execFileSync() argument-based execution and adding additional validation. |
|---|
| المصدر | ⚠️ https://github.com/AlexGladkov/claude-in-mobile/issues/40 |
|---|
| المستخدم | Mcfly_Zhang (UID 98877) |
|---|
| ارسال | 13/07/2026 12:20 AM (2 أشهر منذ) |
|---|
| الاعتدال | 27/08/2026 07:54 AM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 396058 [AlexGladkov claude-in-mobile 3.10.2 src/adb/client.ts execSync تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|