CVE-2026-103975

Name of the Vulnerable Software and Affected Versions Appium versions prior to 7.2.6

Description ZIP extraction in @appium/support allows an archive entry to create a symbolic link to a location outside the extraction directory. A subsequent regular-file entry can then resolve through this link. Because the lexical containment check does not validate the symlink target or the actual destination, an attacker-controlled archive can write files to arbitrary locations accessible by the Appium process. This can lead to the overwriting of configuration files, startup scripts, or executables, potentially resulting in code execution.

Recommendations Update to version 7.2.6.