unscored

CVE-2026-107029

Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

Impact

Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

Affected products

Product	Affected versions
N/A	Version n/a

References

NVD record
CVE.org record
GitHub advisory
https://f-droid.org/packages/es.pile/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107029.md
https://github.com/rubenalfon/Pile