https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:59:42.968791+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33989 CVE-2026-33989 — @mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools 2026-10-07T07:59:42.985101+00:00

Affected: mobile-next mobile-mcp

Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mobile_save_screenshot` and `mobile_start_screen_recording` tools. The `saveTo` and `output` parameters were passed directly to filesystem operations without validation, allowing an attacker to write files outside the intended workspace. Version 0.0.49 fixes the issue.