CVE WatchOct 29, 2026

CVE-2026-107052

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily r

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 29, 2026 · Last modified: Oct 29, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.

Official references

bitbucket.orghttps://bitbucket.org/projectmaxs/maxs
f-droid.orghttps://f-droid.org/packages/org.projectmaxs.module.fileread/
github.comhttps://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107052.md

Related CVEs

No related CVEs by CWE or product.