VYPR

MCP Appium

by Appium

CVEs (3)

  • CVE-2026-58192HigJul 8, 2026
    risk 0.56cvss 8.6epss 0.01

    Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 1.1.6, the Appium storage plugin exposes POST /storage/delete, whose handler passes the user-supplied name value directly into path.join(storageRoot, name)…

  • CVE-2026-58500HigJul 13, 2026
    risk 0.53cvss 8.2epss 0.00

    MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. In versions prior to 1.85.10, the createLocatorGeneratorUI function interpolates attacker-controlled element attributes — text, content-desc, resource-id, and…

  • CVE-2026-58191MedJul 8, 2026
    risk 0.35cvss 6.5epss 0.01

    Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 10.7.0, Appium's base-driver unconditionally mounts the /test/guinea-pig, /test/guinea-pig-scrollable, and /test/guinea-pig-app-banner routes, and…