A vulnerability in ADB-Explorer allows attackers to execute arbitrary code with user privileges by tricking the application into running a malicious binary.

The application suffers from an untrusted control sphere issue where it fails to verify the integrity of the ManualAdbPath setting. An attacker can use a crafted configuration file to point the application to an arbitrary executable, which is then executed when the program starts.

Successful exploitation allows an attacker to gain the same execution privileges as the user running ADB-Explorer. Given the CVSS score of 7.8, this represents a high risk of system compromise, potential data theft, and unauthorized lateral movement within the local environment if the user has elevated permissions.

Immediate Action: Update ADB-Explorer to version 0.9.26021 or later to implement the required path validation.

Proactive Monitoring: Monitor user environments for the deployment of unrecognized configuration files or suspicious executable paths associated with the ADB-Explorer application directory.

Compensating Controls: Ensure that users operate with the principle of least privilege, as the vulnerability executes code with the privileges of the active user session.

Public Exploit Available: No (exploit_available: false)

The risk posed by this vulnerability is significant due to the potential for full code execution under the user context. Administrators should prioritize updating all instances of ADB-Explorer to version 0.9.26021 immediately to remediate the insecure handling of the binary path setting.