What is the CVSS score of EUVD-2026-49879?

EUVD-2026-49879 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-49879?

Yes, a patch is available for EUVD-2026-49879. Update the affected software to the latest version immediately.

Java EUVD-2026-49879

| CVE-2026-43910 HIGH

Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441)

2026-07-28 https://github.com/appium/java-client

GHSA-28f5-38xr-jh2w

Privilege Escalation Java

8.2

CVSS 3.1 · Vendor: https://github.com/appium/java-client

Severity by source

Vendor (https://github.com/appium/java-client) PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Primary rating from Vendor (https://github.com/appium/java-client) · only source for this CVE.

CVSS VectorVendor: https://github.com/appium/java-client

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Source Code Evidence Fetched

Jul 28, 2026 - 14:51 vuln.today

Analysis Generated

Jul 28, 2026 - 14:51 vuln.today

CVE Published

Jul 28, 2026 - 14:26 github-advisory

HIGH 8.2

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

66 maven packages depend on io.appium:java-client (2 direct, 64 indirect)

Ecosystem-wide dependent count for version 8.2.1.

DescriptionCVE.org

Summary

When directConnect(true) is enabled, appium/java-client unconditionally accepts directConnectHost, directConnectPort, and directConnectPath from the server's NEW_SESSION response and silently redirects all subsequent session traffic to the attacker-specified endpoint - with no allowlist, no host validation, and no user notification.

Affected Code

AppiumCommandExecutor.java (line 196-219): setDirectConnect() builds

a new URL from server-supplied fields and calls overrideServerUrl(newUrl) without validating host/IP.

DirectConnect.java: getUrl() constructs protocol://host:port/path

with no allowlist.

Root Cause

Only the protocol is validated (must equal "https"). The destination host and port are never checked against any allowlist or denylist.

PoC (confirmed)

A rogue server injecting directConnectHost=127.0.0.1:4443 causes the client to silently redirect all post-session commands:

[bootstrap] POST /wd/hub/session [bootstrap] Injecting directConnect -> https://127.0.0.1:4443/wd/hub [redirect-target] HIT #1: GET /wd/hub/session/poc-session-001/source [redirect-target] HIT #2: DELETE /wd/hub/session/poc-session-001

Original source code unmodified - confirmed via git diff HEAD (empty).

Evidence Screenshots

Screenshot 1 - Rogue server capturing redirected traffic:

Screenshot 2 - Java client processing response from attacker host:

Impact

Full interception of session traffic
Network pivot to internal hosts (RFC-1918, 169.254.169.254)
Cloud credential theft via IMDS endpoint
Escalates to ~8.1 High in CI/CD environments where directConnect(true)

is set in shared base configuration

Suggested Fix

Add allowlist validation before overrideServerUrl() is called, and/or block RFC-1918/loopback/link-local destinations by default.

poc_appium_directconnect.zip

AnalysisAI

Silent traffic redirection in Appium Java Client 8.2.1 to 10.1.0 allows an unauthenticated rogue Appium server to redirect all session commands to an attacker-controlled endpoint when directConnect is enabled. The client does not validate the destination host, enabling network pivoting and credential theft. Publicly available exploit code exists, and a vendor-released patch (version 10.1.1) is available.