Log in Start free

@appium

Products

ProductCVEsExploitedLatest
appium3–Oct 14, 2026
appium-mcp1–Jul 13, 2026
appium/appium-desktop1–May 2, 2023
java-client1–Jul 28, 2026
support1–Mar 10, 2026

Exploited and recent CVEs

  • CVE-2026-103975 Medium 6.5 Appium: Symlink based Zip Slip in @appium/support ZIP extraction 0.6%
  • CVE-2026-43910 High 8.2 Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor 0.4%
  • CVE-2026-58500 High 8.2 MCP Appium: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI) 0.4%
  • CVE-2026-58191 Medium 6.5 Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes 0.6%
  • CVE-2026-58192 High 8.6 Appium: Unauthenticated arbitrary file/directory deletion in @appium/storage-plugin 0.6%
  • CVE-2026-30973 Medium 6.5 Zip Slip arbitrary file write in @appium/support ZIP extraction 0.5%
  • CVE-2023-2479 Critical 9.8 OS Command Injection in appium/appium-desktop 22.0%