---
id: "CVE-2026-107027"
kind: "vulnerability"
aliases: ["CVE-2026-107027"]
title: "Tarnhelm Android app: exported component lets attackers read and overwrite data"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["android", "package", "tarnhelm"]
not_affected_if: ["other-versions"]
published_at: "2026-10-29T16:17:48+00:00"
first_seen_at: "2026-10-29T16:25:55+00:00"
updated_at: "2026-10-29T16:33:34+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107027", "first_seen_at": "2026-10-29T16:25:55+00:00"}]
---

# Tarnhelm Android app: exported component lets attackers read and overwrite data

Tarnhelm v1.8.2 (versionCode 20250630) exports an Android component without proper permission checks. An unauthorized app or attacker can invoke it to access and overwrite data.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Look for Tarnhelm v1.8.2 (versionCode 20250630) installed on managed Android devices or in your app inventory.
- Check the app's manifest for exported components lacking a permission attribute, if you build or ship it.

## Timeline

- 2026-10-29T16:25:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107027

## From the sources

Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_