Common Weakness Enumeration
CWE-939 Improper Authorization in Handler for Custom URL Scheme
Description
The product uses a handler for a custom URL scheme, but it does not properly restrict which actors can invoke the handler using the scheme.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-939 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-5qhv-x9j4-c3vm | CVE-2026-35394 | HIGH |
@mobilenext/mobile-mcp: Arbitrary Android Intent Execution via mobile_open_url |
2026-04-06 |