SQL Injection Vulnerability in MobSF Mobile Application Testing Tool

CVE-2026-33545

What is CVE-2026-33545?

The MobSF Mobile Security Framework contains a SQL injection vulnerability due to improper string formatting in its read_sqlite() function. When security analysts analyze malicious mobile applications with crafted SQLite databases, they can exploit this flaw. The lack of parameterization or escaping allows attackers to manipulate SQL queries, potentially leading to denial of service or unauthorized data access. This issue has been resolved in version 4.4.6.

References