CVE-2026-43910 in Appium Java client 9.*
java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
- Severity
- High 8.2
- Exploitation
-
0% chance of exploit
in the next 30 days - Fix
- Update to 10.1.1
- Where
- Test dependency
- How it matched
- Approximate – version line, checked against its .0 release
- Also known as
- GHSA-28f5-38xr-jh2w
- First seen
- 2026-11-05 01:13:58 UTC
- Source
- https://osv.dev/vulnerability/GHSA-28f5-38xr-jh2w