{"id":"CVE-2026-107027","kind":"vulnerability","aliases":["CVE-2026-107027"],"related":[],"title":"Tarnhelm Android app: exported component lets attackers read and overwrite data","description":"Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.","summary":"Tarnhelm v1.8.2 (versionCode 20250630) exports an Android component without proper permission checks. An unauthorized app or attacker can invoke it to access and overwrite data.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","package","tarnhelm"],"not_affected_if":["other-versions"],"how_to_check":"- Look for Tarnhelm v1.8.2 (versionCode 20250630) installed on managed Android devices or in your app inventory.\n- Check the app's manifest for exported components lacking a permission attribute, if you build or ship it.","fix":null,"status":"open","published_at":"2026-10-29T16:17:48+00:00","first_seen_at":"2026-10-29T16:25:55+00:00","triaged_at":"2026-10-29T16:33:34+00:00","updated_at":"2026-10-29T16:33:34+00:00","category":"package","confidence":0.4,"triage":{"at":"2026-10-29T16:33:34Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Tarnhelm Android app: exported component lets attackers read and overwrite data","impact":"medium","summary":"Tarnhelm v1.8.2 (versionCode 20250630) exports an Android component without proper permission checks. An unauthorized app or attacker can invoke it to access and overwrite data.","audience":"everyone","category":"package","nicknames":[],"who_cares":["android","tarnhelm"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker reads and overwrites app data on device","analyst_note":"Check the NVD entry and the Tarnhelm repository for the fixed version, the exported component name, and whether it needs a same-device app or a network path.","how_to_check":"- Look for Tarnhelm v1.8.2 (versionCode 20250630) installed on managed Android devices or in your app inventory.\n- Check the app's manifest for exported components lacking a permission attribute, if you build or ship it.","plain_action":"unknown","needs_analyst":true,"not_affected_if":["other-versions"],"who_is_affected":"Installed copies of Tarnhelm v1.8.2 (versionCode 20250630) on Android devices are the exposed systems. The sources do not say which device or data configurations make the component reachable beyond that version.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000661,"input_tokens":4103,"output_tokens":502,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-107027':14A,17A '-2026':13A,16A '20250630':24B,53C 'access':42B,66C 'allow':54C 'android':2A,18B,27B 'app':3A,35B 'arbitrari':64C 'attack':7A,37B,56C 'check':32B 'compon':5A,28B,61C 'cve':12A,15A 'data':11A,45B,65C 'export':4A,25B,60C 'insecur':46C 'invok':39B,58C 'lead':62C 'let':6A 'lz233':49C 'overwrit':10A,44B,68C 'packag':19B 'permiss':31B,47C 'proper':30B 'read':8A 'tarnhelm':1A,20B,21B,50C 'unauthor':34B,55C 'v1.8.2':22B,51C 'versioncod':23B,52C 'without':29B","nicknames":[],"mitigations":[],"who_affected":"Installed copies of Tarnhelm v1.8.2 (versionCode 20250630) on Android devices are the exposed systems. The sources do not say which device or data configurations make the component reachable beyond that version.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"first_public_at":"2026-10-29T16:17:48+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107027","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107027","severity":null,"published_at":"2026-10-29T16:17:48+00:00","modified_at":"2026-10-29T16:17:48+00:00","first_seen_at":"2026-10-29T16:25:55+00:00","fetched_at":"2026-10-29T16:25:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}