Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulne…

Mobile Next MCP server version prior to 0.0.49 contains a Path Traversal vulnerability in the mobile_save_screenshot and mobile_start_screen_recording tools. The saveTo and output parameters were passed directly to filesystem operations without proper validation, allowing attackers to write files outside the intended workspace directory. This vulnerability could enable unauthorized file system access and potential data compromise. The issue has been patched in version 0.0.49 with proper input validation implemented.