The vulnerability allows an attacker to cause the server to execute arbitrary operating system commands via the child_process.exec function within build/index.js. Attacker must supply crafted values for the parameters deviceId, packageName, permission, or entries within extras[].key and extras[].value, which are unsanitized. This corresponds to CWE‑77 “Path Traversal” and CWE‑78 “OS Command Injection” weaknesses. If the malicious values are injected, the server will run them as the process owner, potentially yielding full control over the system.

The affected product is jiantao88’s android‑mcp‑server. Every release prior to the commit 14e2bf27c88ba137e35cbb0c2a75f72b595bb98a is vulnerable. The project uses a rolling‑release model, so absence of explicit version numbers does not reduce risk; any non‑patched installation is vulnerable.

The CVSS score of 4.8 indicates a medium severity vulnerability. The EPSS score is unavailable and the issue is not listed in the CISA KEV catalog, suggesting the exploitation likelihood is not high but still present. Attackers need local access to send the malicious parameters, but once achieved it can lead to unrestricted command execution on the host. Prompt patching is recommended to eliminate the vector.