Is CVE-2026-58192 actively exploited?

No active exploitation of CVE-2026-58192 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-58192 be exploited remotely?

Yes. CVE-2026-58192 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-58192?

CVE-2026-58192 has a CVSS score of 8.6 (HIGH).

HOME VULNERABILITIESCVE-2026-58192

HIGH

CVE-2026-58192

CWE-22Published: July 8, 2026· Updated: Jul 10, 2026

8.6

CVSS v3.1

EPSS:0.34%probability of exploitation in 30 daysPercentile:26.5th

Official Description

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 1.1.6, the Appium storage plugin exposes POST /storage/delete, whose handler passes the user-supplied name value directly into path.join(storageRoot, name) and fs.rimraf() without path sanitization, allowing an unauthenticated remote client to escape the storage root with ../ sequences and recursively delete arbitrary writable files or directories. This issue is fixed in version 1.1.6.

NVD Source

Technical Analysis

CVE-2026-58192 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 8.6.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.