CVE-2026-107029

UNKNOWN NVD

CVSS Score 0

Severity UNKNOWN

Published Oct 29, 2026

Vendor unknown

Description

Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

References

https://f-droid.org/packages/es.pile/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107029.md
https://github.com/rubenalfon/Pile