Appium

3 CVEs across 8 Appium products. Browse Appium vulnerabilities, severities, and proof-of-concept exploits.

Appium products with known CVEs

ProductCVEs
Appium2
Appium/appium-Desktop1
Appium\/base-Driver1
Appium-Chromedriver1
Appium-Desktop1
Appium-Mcp1
Appium\/support1
Java-Client1
Appium CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-43910High8.22026-07-28Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnec…
CVE-2026-58500High8.22026-07-13MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. In versions prior to 1.85.10, the createL…
CVE-2026-58192High8.62026-07-08Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 1.1.6, the Appium storage plugin ex…
CVE-2026-58191Medium6.52026-07-08Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 10.7.0, Appium's base-driver uncond…
CVE-2026-30973Medium6.52026-03-10Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a…
CVE-2023-2479Critical9.82023-05-02OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.
CVE-2016-10557High8.12018-05-31appium-chromedriver is a Node.js wrapper around Chromedriver. Versions below 2.9.4 download binary resources over HTTP, which leaves the module vulnerable to M…