Live › vulnerability › CVE-2026-107017
The ShortcutDispatchActivity component of canvoki versionCode 14 is exposed with insecure permissions. An unauthorized attacker can trigger another user's configured automated actions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
The sources describe only canvoki versionCode 14 and its ShortcutDispatchActivity component. Anyone running that version may be exposed, and the sources do not say which configurations are affected or whether other versions are impacted.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.
This page as .md · .json · in your agent: get_signal("CVE-2026-107017")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.