Description

A security flaw has been discovered in AlexGladkov claude-in-mobile 3.10.2. This affects the function execSync of the file src/adb/client.ts. Performing a manipulation results in os command injection. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. Upgrading to version 3.10.3 is able to mitigate this issue. The patch is named a86d9e55694c98a122943eeff859461d0b9aa6d6. It is suggested to upgrade the affected component.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-08-27T13:18:41.723Z",
  "pubdate": "2026-08-27T13:18:41.723Z",
  "executiveSummary": "A critical OS command injection vulnerability exists in the claude-in-mobile application, specifically within the src/adb/client.ts file.\nThe vulnerability resides in the execSync function, which improperly handles input, allowing an attacker to execute arbitrary system commands on the host operating system.\nThis flaw affects version 3.10.2 of the product.\nSuccessful exploitation poses a severe risk, potentially leading to full system compromise, unauthorized data access, or modification by a local attacker.\nThe vulnerability is currently public, and functional exploits are available, increasing the likelihood of exploitation.\nAttackers require local access to the system to leverage this flaw, as the vulnerability does not appear to be exposed over a network.\nImmediate remediation by upgrading to version 3.10.3 is strongly advised to eliminate this attack vector.",
  "technicalDetails": "The root cause of this vulnerability is an OS command injection flaw located in the execSync function within src/adb/client.ts.\nIn Node.js applications, the execSync function executes a command in a shell, making it inherently dangerous if input is not properly sanitized or if the input is constructed using concatenated, unsanitized user-controlled strings.\nWhen the application fails to validate or escape input parameters passed to execSync, it allows for shell metacharacter injection.\nAn attacker can manipulate the input to break out of the intended command context by injecting shell operators such as semicolons (;), pipes (|), or backticks (`).\nThis allows the attacker to append or prepend arbitrary system commands to the intended command, which are then executed by the underlying shell with the same privileges as the application process.\nThe attack flow requires the attacker to have local access to the system, where they can manipulate the input processed by the vulnerable execSync function.\nUpon triggering the malicious input, the application will execute the injected payload alongside or instead of the original command.\nThe impact of successful exploitation is extensive, as the attacker can perform arbitrary actions, including reading sensitive files, modifying system configurations, installing backdoors, or escalating privileges, depending on the context in which the application is running.\nBecause the exploit is public, the complexity of crafting a working payload is significantly reduced, necessitating immediate remediation.\nThe vulnerability is specifically addressed in patch a86d9e55694c98a122943eeff859461d0b9aa6d6, which introduces necessary input sanitization or refactors the command execution logic to use safer APIs that do not invoke a shell, such as execFileSync or spawn, which accept arguments as an array rather than a single string."
}