PT-2025-35522 · Mobsf · Mobsf

Noname1337H1 · Published 2025-09-02 · Updated 2025-09-03 · CVE-2025-58162

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions MobSF version 4.4.0

Description MobSF is a mobile application security testing tool. An authenticated user who uploaded a specially prepared one.a file could write arbitrary files to any directory writable by the user of the MobSF process. This issue was addressed in version 4.4.1.

Recommendations Update to version 4.4.1 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-58162

GHSA-9GH8-9R95-3FC3

Affected Products

Mobsf

References · 11

• 🔥 https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-9gh8-9r95-3fc3 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58162.json · Exploit
• https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/7f3bc086c028c1b50889cab8a15f7b59b7abdaf9 · Patch
• https://osv.dev/vulnerability/CVE-2025-58162 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9gh8-9r95-3fc3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58162 · Security Note
• https://github.com/MobSF/Mobile-Security-Framework-MobSF · Note
• https://github.com/MobSF/Mobile-Security-Framework-MobSF/releases/tag/v4.4.1 · Note
• https://twitter.com/CVEnew/status/1962683391725199449 · Twitter Post
• https://t.me/CVEtracker/31467 · Telegram Post
• https://t.me/cveNotify/134195 · Telegram Post