| タイトル | AlexGladkov claude-in-mobile <= 3.10.2 Fixed in 3.10.3 Command Injection |
|---|
| 説明 | claude-in-mobile before version 3.10.3 contains an OS command injection vulnerability in the system_shell MCP tool. The tool forwards user-controlled input to execSync() using the shell-string form after applying an incomplete denylist validator. The validator blocks common shell metacharacters but fails to reject a standalone &, allowing an attacker to bypass the protection and inject arbitrary host-side commands.
A remote MCP client, prompt-injected LLM agent, or any attacker able to invoke the system_shell tool can execute arbitrary commands on the host running the MCP server with the privileges of the server process. The issue affects developer workstations rather than only attached Android devices because the injected command executes on the host shell before or independently of the adb shell invocation.
The vulnerability is fixed in version 3.10.3 by replacing shell-string execution with execFileSync() argument-based execution and adding additional validation. |
|---|
| ソース | ⚠️ https://github.com/AlexGladkov/claude-in-mobile/issues/40 |
|---|
| ユーザー | Mcfly_Zhang (UID 98877) |
|---|
| 送信 | 2026年07月13日 00:20 (2 月 ago) |
|---|
| モデレーション | 2026年08月27日 07:54 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 396058 [AlexGladkov claude-in-mobile 3.10.2 src/adb/client.ts execSync 特権昇格] |
|---|
| ポイント | 20 |
|---|