PyPI/mobsf CVE-2026-68923: medium 6.5, EPSS 0.26%

MobSF's CSRF checks not enforced after Django migration

Action: Upgrade mobsf to 4.5.1 or later.

pip install mobsf==4.5.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3688
• https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-3p54-567p-2wpr
• https://github.com/MobSF/Mobile-Security-Framework-MobSF/pull/2627
• https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/62563ca429a75b3e5d47a13b958e1d2e7d5e2bbf
• https://github.com/MobSF/Mobile-Security-Framework-MobSF
• https://github.com/MobSF/Mobile-Security-Framework-MobSF/releases/tag/v4.5.1
• https://pypi.org/project/mobsf
• https://github.com/advisories/GHSA-3p54-567p-2wpr
• https://nvd.nist.gov/vuln/detail/CVE-2026-68923

CVE-2026-68923 · published 2026-08-19T11:56:27.721821Z · modified 2026-08-19T12:45:05.491081618Z · JSON