CVE-2026-117559

DroidMind shell checks permit blocked Android commands

hyperb1iss · DroidMind MCP tools

First documented disclosure · Review checkpoint

Summary

Crafted tool arguments can bypass command restrictions on a connected Android device.

Severity and exploitation evidence

High · 8.5/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed sources describe a vulnerability and demonstration, not established malicious exploitation.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Shell substitution is interpreted by the device after the allowlist's different parser accepts it; another path skips validation.

Conditions required

MCP tool-call control and a connected Android device accessible through ADB.

Potential impact

Commands on the Android device within the available ADB privileges; host compromise is not established.

Affected versions and configurations

Through 0.4.0.

Fix and mitigation status

No fixed version established in the reviewed sources.

Practical next steps

Disable affected device tools or isolate access until a verified patch; validate parameters and avoid shell interpretation.

Operating lesson

A command allowlist must match the executor's parsing behavior.

Evidence and limits

The unchanged October 26 issue predates October 27 assignment. No observed malicious use or universal device-data access is established.

Sources