CVE-2026-107052: High severity vulnerability

Published Oct 29, 2026

Updated

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An unauthorized attacker can exploit it remotely without authentication or user interaction, according to the CVSS vector. Exploitation targets the AIDL interface in ProjectMAXS MAXS Module FileRead versionCode 27.

What does an attacker need to provide?

The attacker needs to supply an absolute file path through the affected AIDL interface. This can allow reading files outside the application's sandbox.

What is the security impact?

The issue affects integrity and is rated high severity with a CVSS score of 7.5. The provided data does not indicate a confidentiality or availability impact.

CVE-2026-107052: High severity vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What does an attacker need to provide?

What is the security impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What does an attacker need to provide?

What is the security impact?