CVE-2026-81562: A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the fi
mediumvulnerabilityLLM-Specific
security
Summary
A security flaw was found in AlexGladkov claude-in-mobile version 3.10.2 where the execSync function in src/adb/client.ts is vulnerable to os command injection (running unauthorized system commands through manipulated input). This flaw requires local access to exploit, but the attack method has been publicly released and could be used maliciously.
Solution / Mitigation
Upgrading to version 3.10.3 mitigates this issue. The patch is identified as a86d9e55694c98a122943eeff859461d0b9aa6d6.
Vulnerability Details
CVSS Score
5.3(medium)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
local
Attack Complexity
low
Privileges Required
low
User Interaction
none
Disclosure Date
August 27, 2026
Classification
Attack Type
Other
Attack SophisticationTrivial
Impact (CIA+S)
integrityconfidentiality
Affected Vendors
Anthropic
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-81562
First tracked: August 27, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 75%