CVE-2025-58162: Opensecurity Mobile Security Framework

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1.

Affected products

• Opensecurity Mobile Security Framework: version 4.4.0 only

Published 2025-09-02. Last modified 2026-06-17.