CVE-2026-81562
Last modified
CVE-2026-81562 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. EPSS estimates a 0.63% chance of exploitation in the next 30 days.
Description
A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. Upgrading to version 3.10.3 is able to mitigate this issue. The patch is named a86d9e55694c98a122943eeff859461d0b9aa6d6. It is suggested to upgrade the affected component.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| AlexGladkov | claude-in-mobile | 3.10.2 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-81562?
How severe is CVE-2026-81562?
How do I fix CVE-2026-81562?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-81552IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a re…8.8
- CVE-2026-81554IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a re…6.5
- CVE-2026-81557An improper neutralization of input during web page generati…5.4
- CVE-2026-81558A missing authorization vulnerability in the SocketIo API in…4.3
- CVE-2026-81559A missing authorization vulnerability in the TaskScheduler A…4.3
- CVE-2026-81560A vulnerability was identified in blackms aistack up to 1.6.…5.3
- CVE-2026-81563A BIND resolver encountering an SVCB/HTTPS AliasMode record …7.5
- CVE-2026-81564Joomla Extension - joomshaper.com - Missing Directory Confin…7
- CVE-2026-81565Joomla Extension - joomshaper.com - Missing Directory Confin…6.9
- CVE-2026-81566Joomla Extension - joomshaper.com - Missing Access Control i…5.1
- CVE-2026-81567Joomla Extension - j2commerce.com - Unauthenticated blind SQ…8.7
- CVE-2026-81568Joomla Extension - j2commerce.com - Arbitrary file read via …8.7
Are you affected by CVE-2026-81562?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
