Mmastodon Technology Cybersecurity first seen 3 d ago, last 3 d ago, peak #11

Android file manager flaw lets any app access files

Original: CVE-2026-81301: Ekia File Manager 1.2.7 exported ContentProvider lets any local app read/delete arbitrary files. CVSS 8.

A security vulnerability tracked as CVE-2026-81301 has been disclosed in Ekia File Manager version 1.2.7 for Android. The app exposes an exported ContentProvider that allows any locally installed application to read or delete arbitrary files on the device, with a CVSS score of 8.4. No patch is currently available, and users are advised to restrict the app's access or remove it until a fix is released.

Why now: The disclosure is unpatched and could affect Android users' file security, prompting security community discussion.

Ekia File Manager CVE-2026-81301 Android

Open on mastodon →

Evidence

CVE-2026-81301: Ekia File Manager 1.2.7 exported ContentProvider lets any local app read/delete arbitrary files. CVSS 8.4, unpatched. Restrict access or update now. # CVE # AndroidSecurity # infosec https://www. valtersit.com/cve/CVE-2026-813 01/ · hugovalters

API: https://socialmediatrends-api.osmike.com/v1/trends/4758170