Live › vulnerability › CVE-2026-107030
The craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) has insecure permissions that let an unauthorized party trigger its one-time password clipboard mechanism. The result is a desynchronized timing of that mechanism, according to the description.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Only users of the craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) appear affected, per the description. The sources do not describe the exact permission flaw or which configurations are exposed.
No product ranges from the sources yet.
1.0.1 with versionCode 10003.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password) mechanism, causing a desynchronization of the timing.
This page as .md · .json · in your agent: get_signal("CVE-2026-107030")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.