CVE-2026-117559 Details
Description
DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including prompt-injected agents, can inject commands through parameters interpolated into Device.run_shell() or unvalidated Device.list_directory() to run blocked commands such as reboot on connected Android devices.
A command injection vulnerability has been identified in DroidMind versions through 0.4.0. This vulnerability allows Model Context Protocol (MCP) clients to bypass the shell command allowlist using command substitution syntax. Attackers, including those exploiting prompt injection, can inject commands through parameters that are directly interpolated into device shell commands. This exploitation can lead to the execution of blocked commands, such as rebooting the device, on connected Android devices.
Users are advised to update to a version of DroidMind that addresses this vulnerability. The latest version can be obtained from the official GitHub repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Nov 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/hyperb1iss/droidmind/issues/17 | CISA-ADP | ExploitIssue TrackingTechnical AnalysisVendor |
| https://github.com/hyperb1iss/droidmind | [email protected] | ProductSource CodeVendor |
| https://github.com/hyperb1iss/droidmind/blob/v0.4.0/droidmind/security.py#L338-L402 | [email protected] | Source CodeVendor |
| https://github.com/hyperb1iss/droidmind/issues/17 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/droidmind-through-0.4.0-command-injection-via-shell-allowlist-bypass | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| DroidMind | <= 0.4.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 2, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | [email protected] |