CVE-2026-33989
1 advisory.
npm/@mobilenext/mobile-mcp CVE-2026-33989: high 8.1
@mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools
Action: Upgrade @mobilenext/mobile-mcp to 0.0.49 or later.
npm i @mobilenext/mobile-mcp@0.0.49Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.49 | - |
Fixed versions
| 0.0.49 |
Sources
- osv: GHSA-3p2m-h2v6-g9mx
- https://github.com/mobile-next/mobile-mcp/security/advisories/GHSA-3p2m-h2v6-g9mx
- https://nvd.nist.gov/vuln/detail/CVE-2026-33989
- https://github.com/mobile-next/mobile-mcp/commit/f5e32295903128c1e71cf915ae6c0b76c7b0153b
- https://github.com/mobile-next/mobile-mcp
- https://github.com/mobile-next/mobile-mcp/releases/tag/0.0.49
CVE-2026-33989 · published · modified · JSON