Mobile-next vulnerabilities
We track 1 vulnerability in Mobile-next products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 6, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Mobile-next vulnerabilities
- 8.8 High severity
mobile-mcp: Improper Authorization in Handler for Custom URL Scheme
Mobile Next is an MCP server for mobile development and automation. Prior to 0.0.50, the mobile_open_url tool in mobile-mcp passes user-supplied URLs directly to Android's intent system without any scheme validation, allowing execution of arbitrary Android int