CVE-2026-30973

CVE-2026-30973 is a path traversal (Zip Slip) vulnerability in the `@appium/support` package, affecting Appium automation framework versions prior to 7.0.6. This flaw allows an attacker to write files outside the intended destination directory due to a non-functional check during ZIP extraction. Rated Medium with a CVSSv3.1 score of 6.5, the vulnerability has a network attack vector and low complexity, but requires user interaction for exploitation, potentially leading to high integrity impact through arbitrary file writes. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed on the CISA KEV or Hot List.