Browse all 6 CVE security advisories affecting appium. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-103975 | Appium: Symlink based Zip Slip in @appium/support ZIP extraction — appium CWE-59 | 6.5 | Medium | 2026-10-14 |
| CVE-2026-43910 | Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor — java-client CWE-441 | 8.2 | High | 2026-07-28 |
| CVE-2026-58500 | MCP Appium: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI) — appium-mcp CWE-79 | 8.2 | High | 2026-07-13 |
| CVE-2026-58191 | Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes — appium CWE-79 | 6.5 | Medium | 2026-07-08 |
| CVE-2026-58192 | Appium: Unauthenticated arbitrary file/directory deletion in @appium/storage-plugin — appium CWE-22 | 8.6 | High | 2026-07-08 |
| CVE-2023-2479 | OS Command Injection in appium/appium-desktop — appium/appium-desktop CWE-78 | 9.8 | - | 2023-05-02 |
This page lists every published CVE security advisory associated with appium. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.