Executive brief
MobSF Path Traversal in GET /download/<filename> using absolute filenames
Affected products
- PyPI mobsf
Junglewise Threat Intelligence
CVE-2025-58161: PYSEC-2026-1672 - MobSF Path Traversal in GET /download/<filename> using absolute filenames
CVE-2025-58161 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: mobsf (PyPI). Vendors: PyPI.