What is CVE-2026-30973?

CVE-2026-30973 is a medium-severity vulnerability in @Appium Support, classified under Path Traversal. CVSS score: 6.5/10. Published 2026-03-10.

How severe is CVE-2026-30973?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Path Traversal in @Appium Support

CVE-2026-30973

Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a ZIP extraction implementation (extractAllTo() via ZipExtractor.extract()) with…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.001 (20.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

@Appium Support — versions < 7.0.6
Appium Appium\/support

Weakness classification (CWE)

CWE-22 — Path Traversal

References

https://github.com/appium/appium/security/advisories/GHSA-rfx7-4xw3-gh4m (x_refsource_CONFIRM, Exploit, Vendor Advisory)
https://github.com/appium/appium/releases/tag/@appium/support@7.0.6 (x_refsource_MISC, Release Notes)

Frequently asked questions

What is CVE-2026-30973?: CVE-2026-30973 is a medium-severity vulnerability in @Appium Support, classified under Path Traversal. CVSS score: 6.5/10. Published 2026-03-10.
How severe is CVE-2026-30973?: Medium severity. CVSS v3 base score is 6.5 out of 10.