What are the most critical vulnerabilities in mobile app penetration testing?

Some of the most critical vulnerabilities found in mobile app penetration testing include insecure data storage, weak or improperly implemented authentication, insufficient transport layer protection, and reverse-engineerable code that exposes sensitive logic or credentials. API misconfigurations and overly permissive access controls are also common, often allowing unauthorized access to backend data.