CVE-2025-52573 | joshuayoes ios-simulator-mcp up to 1.3.2 ui_tap os command injection (GHSA-6f6r-m9pv-67jw)

June 26, 2025 Yanac

A vulnerability classified as critical has been found in joshuayoes ios-simulator-mcp up to 1.3.2. Affected is the function ui_tap. The manipulation leads to os command injection.

This vulnerability is traded as CVE-2025-52573. Local access is required to approach this attack. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More