CyberRota Analysis
AI-GeneratedThe appium-mcp-server versions up to 0.1.61 are vulnerable due to inadequate validation of file paths in the write_file and write_files_batch functions, enabling attackers to write files outside the designated PROJECT_ROOT directory. This flaw allows for the overwriting of arbitrary files with the privileges of the server user, potentially compromising sensitive configuration files and shell profiles. Organizations using this software should prioritize patching to mitigate the risk of unauthorized file access and system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools, allowing attackers to write files outside the intended PROJECT_ROOT directory. Attackers can supply absolute paths or relative paths with parent directory segments to overwrite arbitrary files with the server user's privileges, including shell profiles and configuration files in the home directory.