PT-2025-39375 · Unknown · Adb Mcp Server

CVE-2025-59834

·

Publicado

2025-09-24

·

Atualizado

2025-09-25

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ADB MCP Server versions 0.1.0 and prior
Description ADB MCP Server, a Model Context Protocol server for interacting with Android devices through ADB, contains a flaw in its implementation. Versions 0.1.0 and earlier are susceptible to command injection attacks due to the way the MCP Server is written. The issue stems from the tool definition and implementation of the MCP Server. A patch is available via commit 041729c.
Recommendations Update ADB MCP Server to a version later than 0.1.0, or apply commit 041729c.

Exploit

Correção

Command Injection

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-77CWE-78

Identificadores relacionados

CVE-2025-59834
GHSA-54J7-GRVR-9XWG

Produtos afetados

Adb Mcp Server