npm/adb-mcp CVE-2025-59834: critical 9.8, EPSS 2.51%
Command Injection in adb-mcp MCP Server
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-54j7-grvr-9xwg
- https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg
- https://nvd.nist.gov/vuln/detail/CVE-2025-59834
- https://github.com/srmorete/adb-mcp/commit/041729c0b25432df3199ff71b3163a307cf4c28c
- https://github.com/srmorete/adb-mcp
- https://github.com/srmorete/adb-mcp/blob/master/src/index.ts#L334-L355
CVE-2025-59834 · published · modified · JSON