GHSA-3p2m-h2v6-g9mx: @mobilenext/mobile-mcp alllows arbitrary file write via Path Traversal in mobile screen capture tools

Summary

The @mobilenext/mobile-mcp server has a path traversal flaw in the mobile_save_screenshot and mobile_start_screen_recording tools. The saveTo and output parameters are passed directly to filesystem write operations (fs.writeFileSync in src/server.ts) with no path validation, so an attacker can write files outside the intended workspace.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• MediumRecent AI agent experiments reveal a risky future of machine 'teamwork' inside corporationsSimilar attack · CNBC Technology
• MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
• MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
• MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog
• MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database