CVE-2026-117559— DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

Quick assessment

Affected

hyperb1iss droidmind

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

DroidMind 0.4.0 及更早版本存在命令注入漏洞，允许 MCP 客户端通过或反引号（backtick）替换机制绕过 shell 命令白名单。攻击者（包括被提示注入的智能体）可通过传入的参数或未经验证的调用注入恶意命令，从而在已连接的 Android 设备上执行被禁止的操作（例如重启命令）。

CVSS 7.8 · High Updated Oct 27, 2026

Possible ATT&CK Techniques 2 AI

T1190 · Exploit Public-Facing Application T1059 · Command and Scripting Interpreter

Affected Version Matrix 1

Vendor	Product	Version Range	Status
hyperb1iss	droidmind	`≤ 0.4.0`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

Source: CVE Program / CVE List V5

Vulnerability Description

DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.run_shell() or unvalidated Device.list_directory() to run blocked commands such as reboot on connected Android devices.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
hyperb1iss	droidmind	0 ~ 0.4.0	-

II. Public POCs for CVE-2026-117559

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-117559

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-117559 (1)

🔗 DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass | Advisories | VulnCheck third-party-advisory

Proof of Concept for CVE-2026-117559 (2)

https://www.cve.org/CVERecord?id=CVE-2026-117559

IV. Related Vulnerabilities

Same weakness: CWE-78