CVE-2026-19978

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function childprocess.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument...

CVE-2026-19978

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function childprocess.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument...

EUVD-2026-60038

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function childprocess.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument...

CVE-2026-19978

CVE-2026-19978 affects jiantao88 android-mcp-server. The vulnerability is in the function child_process.exec within the file build/index.js of the Command Execution component. An attacker can manipulate arguments such as deviceId , packageName , permission , and extras[].key/value to trigger OS c...

CVE-2026-19978 jiantao88 android-mcp-server Command Execution index.js child_process.exec os command injection

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function childprocess.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument...

CVE-2026-19978: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function childprocess.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument...

PT-2026-73197

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function child process.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument...

CVE-2025-59834

ADB MCP Server is a MCP Model Context Protocol server for interacting with Android devices through ADB. In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementatio...