CVE-2025-52573 Command Injection in MCP Server ios-simulator-mcp

iOS Simulator MCP Server ios-simulator-mcp is a Model Context Protocol MCP server for interacting with iOS simulators. Versions prior to 1.3.3 are written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. T...

CVE-2025-52573 Command Injection in MCP Server ios-simulator-mcp

iOS Simulator MCP Server ios-simulator-mcp is a Model Context Protocol MCP server for interacting with iOS simulators. Versions prior to 1.3.3 are written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. T...

CVE-2025-52573

iOS Simulator MCP Server ios-simulator-mcp is a Model Context Protocol MCP server for interacting with iOS simulators. Versions prior to 1.3.3 are written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. T...

CVE-2025-52573

CVE-2025-52573 affects the iOS Simulator MCP Server (ios-simulator-mcp). The vulnerability arises in the MCP Server’s tool definitions (notably the ui_tap tool) which rely on Node.js child process API exec. When untrusted input is used for parameters such as duration, udid, x, and y, shell meta-c...

CVE-2025-52573 Command Injection in MCP Server ios-simulator-mcp

iOS Simulator MCP Server ios-simulator-mcp is a Model Context Protocol MCP server for interacting with iOS simulators. Versions prior to 1.3.3 are written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. T...

CyGym: a Simulation-Based Game-Theoretic Analysis Framework for Cybersecurity

We introduce a novel cybersecurity encounter simulator between a network defender and an attacker designed to facilitate game-theoretic modeling and analysis while maintaining many significant features of real cyber defense. Our simulator, built within the OpenAI Gym framework, incorporates...

iOS Simulator MCP Server: Operating System Command Injection Vulnerability

iOS Simulator MCP Server is an MCP server for interacting with iOS Simulator by Joshua Yoes, an individual developer. An operating system command injection vulnerability exists in iOS Simulator MCP Server versions prior to 1.3.3, which stems from a command injection vulnerability in some MCP Serv...

CVE-2025-52573: Improper Neutralization of Special Elements used in an OS Command

iOS Simulator MCP Server ios-simulator-mcp is a Model Context Protocol MCP server for interacting with iOS simulators. Versions prior to 1.3.3 are written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. T...

PT-2025-26970 · Apple · Ios Simulator Mcp Server

Name of the Vulnerable Software and Affected Versions: iOS Simulator MCP Server versions prior to 1.3.3 Description: The issue concerns a command injection vulnerability in the MCP Server tool definition and implementation. The MCP Server exposes the tool ui tap, which relies on the Node.js child...

Algorithmic Approaches to Enhance Safety in Autonomous Vehicles: Minimizing Lane Changes and Merging

The rapid advancements in autonomous vehicle AV technology promise enhanced safety and operational efficiency. However, frequent lane changes and merging maneuvers continue to pose significant safety risks and disrupt traffic flow. This paper introduces the Minimizing Lane Change Algorithm MLCA, ...

com.powsybl:powsybl-action-dsl (4.9.1), com.powsybl:powsybl-action-dsl-spi (4.9.1) +79 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (4.9.1)

com.powsybl:powsybl-commons MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.9.1 - com.powsybl:powsybl-action-dsl-spi 4.9.1 -...

com.powsybl:powsybl-action-dsl (4.8.0-rc2), com.powsybl:powsybl-action-dsl-spi (4.8.0-rc2) +58 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (4.8.0-rc2)

com.powsybl:powsybl-commons MAVEN version 4.8.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.8.0-rc2 - com.powsybl:powsybl-action-dsl-spi 4.8.0-rc2 -...

com.powsybl:powsybl-action-dsl (3.6.0), com.powsybl:powsybl-action-dsl-spi (3.6.0) +69 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (3.6.0)

com.powsybl:powsybl-commons MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 3.6.0 - com.powsybl:powsybl-action-dsl-spi 3.6.0 -...

com.powsybl:powsybl-action-dsl (4.2.0-rc1), com.powsybl:powsybl-action-dsl-spi (4.2.0-rc1) +51 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (4.2.0-rc1)

com.powsybl:powsybl-commons MAVEN version 4.2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.2.0-rc1 - com.powsybl:powsybl-action-dsl-spi 4.2.0-rc1 -...

com.powsybl:powsybl-action-dsl (4.5.0-rc1), com.powsybl:powsybl-action-dsl-spi (4.5.0-rc1) +53 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (4.5.0-rc1)

com.powsybl:powsybl-commons MAVEN version 4.5.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.5.0-rc1 - com.powsybl:powsybl-action-dsl-spi 4.5.0-rc1 -...

com.powsybl:powsybl-action-dsl (2.1.0), com.powsybl:powsybl-action-dsl-spi (2.1.0) +59 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (2.1.0)

com.powsybl:powsybl-commons MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 2.1.0 - com.powsybl:powsybl-action-dsl-spi 2.1.0 -...

com.powsybl:powsybl-action-dsl (5.1.0), com.powsybl:powsybl-action-dsl-spi (5.1.0) +78 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (5.1.0)

com.powsybl:powsybl-commons MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 5.1.0 - com.powsybl:powsybl-action-dsl-spi 5.1.0 -...

com.powsybl:powsybl-action-dsl (4.1.0), com.powsybl:powsybl-action-dsl-spi (4.1.0) +70 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (4.1.0)

com.powsybl:powsybl-commons MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.1.0 - com.powsybl:powsybl-action-dsl-spi 4.1.0 -...

com.powsybl:powsybl-action-dsl (4.1.2), com.powsybl:powsybl-action-dsl-spi (4.1.2) +52 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (4.1.2)

com.powsybl:powsybl-commons MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.1.2 - com.powsybl:powsybl-action-dsl-spi 4.1.2 -...

com.powsybl:powsybl-action-dsl (3.1.0), com.powsybl:powsybl-action-dsl-spi (3.1.0) +96 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (3.1.0)

com.powsybl:powsybl-commons MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 3.1.0 - com.powsybl:powsybl-action-dsl-spi 3.1.0 -...