{"data":{"id":"1a299bf8-8ab8-44c2-b941-cfd419d758e6","title":"CVE-2026-81562: A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the fi","summary":"A security flaw was found in AlexGladkov claude-in-mobile version 3.10.2 where the execSync function in src/adb/client.ts is vulnerable to os command injection (running unauthorized system commands through manipulated input). This flaw requires local access to exploit, but the attack method has been publicly released and could be used maliciously.","solution":"Upgrading to version 3.10.3 mitigates this issue. The patch is identified as a86d9e55694c98a122943eeff859461d0b9aa6d6.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-81562","publishedAt":"2026-08-27T13:18:41.723Z","cveId":"CVE-2026-81562","cweIds":["CWE-77","CWE-78"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Anthropic"],"affectedVendorsRaw":["AlexGladkov claude-in-mobile"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-27T13:18:41.723Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.75,"researchCategory":null,"atlasIds":null}}