What the vulnerability does
01Description
The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information.
CVSS base score
2.9/10
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Key dates
02Disclosure timeline
May 12, 2026
CVE published
June 2, 2026
Record updated
External resources
