CVE-2016-10557

CVE-2016-10557 affects appium-chromedriver versions below 2.9.4, where the module insecurely downloads binary resources over HTTP. This vulnerability allows for Man-in-the-Middle (MITM) attacks, potentially leading to remote code execution (RCE) if an attacker can swap legitimate binaries with malicious ones. Rated 8.1 HIGH, it has a network attack vector with high impact on confidentiality, integrity, and availability, but requires high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion.