Android Mcp Server
Monthly
OS command injection in android-mcp-server's `build/index.js` allows local low-privilege attackers to execute arbitrary shell commands by supplying malicious values for parameters such as `deviceId`, `packageName`, `permission`, or `extras` fields passed to the `child_process.exec()` ADB command builder. The vulnerable code interpolates user-supplied input directly into shell command strings without sanitization, making exploitation trivial for any local user with access to the MCP server process. A publicly available proof-of-concept exists via the GitHub issue tracker, and a patch commit has been published; no CISA KEV listing confirms active in-the-wild exploitation at time of analysis.
OS command injection in android-mcp-server's `build/index.js` allows local low-privilege attackers to execute arbitrary shell commands by supplying malicious values for parameters such as `deviceId`, `packageName`, `permission`, or `extras` fields passed to the `child_process.exec()` ADB command builder. The vulnerable code interpolates user-supplied input directly into shell command strings without sanitization, making exploitation trivial for any local user with access to the MCP server process. A publicly available proof-of-concept exists via the GitHub issue tracker, and a patch commit has been published; no CISA KEV listing confirms active in-the-wild exploitation at time of analysis.