CVE-2026-84201
Received Received - Intake

Path Traversal in appium-mcp-server

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: VulnCheck

Description
appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools, allowing attackers to write files outside the intended PROJECT_ROOT directory. Attackers can supply absolute paths or relative paths with parent directory segments to overwrite arbitrary files with the server user's privileges, including shell profiles and configuration files in the home directory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-01
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-84201
EUVD
EUVD-2026-69288

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
argneshu appium_mcp_server to 0.1.61 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a path traversal issue in appium-mcp-server through version 0.1.61. The software fails to validate or normalize file paths in the write_file and write_files_batch tools. Attackers can supply absolute paths or relative paths with parent directory segments to write files outside the intended PROJECT_ROOT directory, overwriting arbitrary files with the server user's privileges.

Detection Guidance

Check if appium-mcp-server version 0.1.61 or earlier is installed by running: pip show appium-mcp-server. Inspect server logs for suspicious file write operations or paths containing parent directory segments like '../'. Monitor for unexpected file modifications in PROJECT_ROOT (~/.generated-framework) or user home directories.

Impact Analysis

An attacker could overwrite critical files like shell profiles or configuration files in the home directory. This could lead to code execution, privilege escalation, or system compromise depending on the files overwritten. The server's elevated permissions increase the risk of significant impact.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA by allowing unauthorized file writes outside intended directories. Attackers could overwrite critical configuration files, potentially exposing sensitive data or system settings. This violates data integrity and access control requirements in both regulations.

Mitigation Strategies

Upgrade appium-mcp-server to the latest version beyond 0.1.61. Disable write_file and write_files_batch tools if not needed. Implement strict input validation for file paths in server configurations. Restrict server user permissions to minimize impact of potential file overwrites.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84201. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart