appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools, allowing attackers to write files outside the intended PROJECT_ROOT directory. Attackers can supply absolute paths or relative paths with parent directory segments to overwrite arbitrary files with the server user's privileges, including shell profiles and configuration files in the home directory.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v4.0
Weakness Type (CWE)
References 4
https://github.com/argneshu/appium-mcp-server/blob/92b5c2b325e7bdd124f1f41a6049…
disclosure@vulncheck.com
https://github.com/argneshu/appium-mcp-server/blob/92b5c2b325e7bdd124f1f41a6049…
disclosure@vulncheck.com
https://www.npmjs.com/package/appium-mcp-server
disclosure@vulncheck.com
https://www.vulncheck.com/advisories/appium-mcp-server-through-0.1.61-path-trav…
disclosure@vulncheck.com