CVE-2026-19978

A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function child_process.exec of the file build/index.js of the component Command Execution. Executing a manipulation of the argument deviceId/packageName/permission/extras[].key/extras[].value can lead to os command injection. It is possible to launch the attack on the local host. The exploit has been published and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. This patch is called 14e2bf27c88ba137e35cbb0c2a75f72b595bb98a. It is advisable to implement a patch to correct this issue.

• CWE-77
• CWE-78

• https://github.com/jiantao88/android-mcp-server/
• https://github.com/jiantao88/android-mcp-server/commit/14e2bf27c88ba137e35cbb0c2a75f72b595bb98a
• https://github.com/jiantao88/android-mcp-server/issues/1
• https://vuldb.com/cve/CVE-2026-19978
• https://vuldb.com/submit/873898
• https://vuldb.com/vuln/391157
• https://vuldb.com/vuln/391157/cti

Published

Aug 17, 2026

Last Modified

Aug 20, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19972A vulnerability has been found in itsourcecode Hospital Mana…6.3
• CVE-2026-19973A vulnerability was found in itsourcecode Hospital Managemen…6.3
• CVE-2026-19974A security flaw has been discovered in treefrogframework tre…5.6
• CVE-2026-19975A weakness has been identified in Azuriom CMS up to 1.2.12. …3.1
• CVE-2026-19976A security vulnerability has been detected in COMFAST CF-N1-…6.6
• CVE-2026-19977A vulnerability was detected in EFM ipTIME A3004T 14.19.0. T…10
• CVE-2026-19979A vulnerability was identified in GL.iNet A1300, AX1800, AXT…8.3
• CVE-2026-1998A flaw has been found in micropython up to 1.27.0. This vuln…5.5
• CVE-2026-19980A security flaw has been discovered in GL.iNet A1300, AX1800…7.4
• CVE-2026-19981A weakness has been identified in GL.iNet A1300, AX1800, AXT…7.4
• CVE-2026-19982A security vulnerability has been detected in GL.iNet BE9300…7.4
• CVE-2026-19983A vulnerability was detected in GL.iNet A1300, AX1800, AXT18…8.3