Live › vulnerability › CVE-2026-107034
LeafPad / Leaf Note version 1.21 (versionCode 21) has insecure permissions that let an unauthorized attacker read another user's note data. The sources do not describe the exact access path.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
The sources describe only LeafPad / Leaf Note version 1.21 (versionCode 21), where insecure permissions let an unauthorized party read another user's note data. The sources do not say which platform or configuration is involved, so anyone running this app version should treat it as affected until the vendor says otherwise.
No product ranges from the sources yet.
1.21 (versionCode 21)No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.
This page as .md · .json · in your agent: get_signal("CVE-2026-107034")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.