| 标题 | AlexGladkov claude-in-mobile <= 3.10.2 Fixed in 3.10.3 Command Injection |
|---|
| 描述 | claude-in-mobile before version 3.10.3 contains an OS command injection vulnerability in the system_shell MCP tool. The tool forwards user-controlled input to execSync() using the shell-string form after applying an incomplete denylist validator. The validator blocks common shell metacharacters but fails to reject a standalone &, allowing an attacker to bypass the protection and inject arbitrary host-side commands.
A remote MCP client, prompt-injected LLM agent, or any attacker able to invoke the system_shell tool can execute arbitrary commands on the host running the MCP server with the privileges of the server process. The issue affects developer workstations rather than only attached Android devices because the injected command executes on the host shell before or independently of the adb shell invocation.
The vulnerability is fixed in version 3.10.3 by replacing shell-string execution with execFileSync() argument-based execution and adding additional validation. |
|---|
| 来源 | ⚠️ https://github.com/AlexGladkov/claude-in-mobile/issues/40 |
|---|
| 用户 | Mcfly_Zhang (UID 98877) |
|---|
| 提交 | 2026-07-13 00時20分 (2 月前) |
|---|
| 管理 | 2026-08-27 07時54分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 396058 [AlexGladkov claude-in-mobile 3.10.2 src/adb/client.ts execSync 权限提升] |
|---|
| 积分 | 20 |
|---|