{"id":"CVE-2026-107034","kind":"vulnerability","aliases":["CVE-2026-107034"],"related":[],"title":"LeafPad Leaf Note: insecure permissions let attackers read other users' notes","description":"Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.","summary":"LeafPad / Leaf Note version 1.21 (versionCode 21) has insecure permissions that let an unauthorized attacker read another user's note data. The sources do not describe the exact access path.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","leaf-note","leafpad","other"],"not_affected_if":["other-app-versions"],"how_to_check":"- Confirm whether the installed app is LeafPad / Leaf Note and check its version: `1.21` (versionCode `21`)","fix":null,"status":"open","published_at":"2026-10-29T16:17:49+00:00","first_seen_at":"2026-10-29T16:25:55+00:00","triaged_at":"2026-10-29T16:33:26+00:00","updated_at":"2026-10-29T16:33:26+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-29T16:33:26Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"LeafPad Leaf Note: insecure permissions let attackers read other users' notes","impact":"medium","summary":"LeafPad / Leaf Note version 1.21 (versionCode 21) has insecure permissions that let an unauthorized attacker read another user's note data. The sources do not describe the exact access path.","audience":"everyone","category":"other","nicknames":[],"who_cares":["leafpad","leaf-note","android"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Other users' private notes can be read by an attacker.","analyst_note":"Confirm the platform, the exact permission flaw and whether a fixed version exists; check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-107034 and the vendor's release notes.","how_to_check":"- Confirm whether the installed app is LeafPad / Leaf Note and check its version: `1.21` (versionCode `21`)\n- unknown for anything beyond this; the sources do not say how to test exposure","plain_action":"If you use the Leaf Note app (LeafPad) version 1.21, check the app's store page for an update and install it when one is available.","needs_analyst":true,"not_affected_if":["other-app-versions"],"who_is_affected":"The sources describe only LeafPad / Leaf Note version 1.21 (versionCode 21), where insecure permissions let an unauthorized party read another user's note data. The sources do not say which platform or configuration is involved, so anyone running this app version should treat it as affected until the vendor says otherwise.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000709,"input_tokens":4089,"output_tokens":601,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-107034':14A,17A '-2026':13A,16A '1.21':27B '21':29B,61C 'access':51B 'allow':62C 'android':18B 'anoth':39B,68C 'arbitrarili':66C 'attack':7A,37B,64C 'cve':12A,15A 'data':43B,72C 'describ':48B 'exact':50B 'insecur':4A,31B,53C 'leaf':2A,20B,24B,57C 'leaf-not':19B 'leafpad':1A,22B,23B,56C 'let':6A,34B 'note':3A,11A,21B,25B,42B,58C,71C 'path':52B 'permiss':5A,32B,54C 'read':8A,38B,67C 'sourc':45B 'unauthor':36B,63C 'user':10A,40B,69C 'v1.21':59C 'version':26B 'versioncod':28B,60C","nicknames":[],"mitigations":[],"who_affected":"The sources describe only LeafPad / Leaf Note version 1.21 (versionCode 21), where insecure permissions let an unauthorized party read another user's note data. The sources do not say which platform or configuration is involved, so anyone running this app version should treat it as affected until the vendor says otherwise.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"If you use the Leaf Note app (LeafPad) version 1.21, check the app's store page for an update and install it when one is available.","first_public_at":"2026-10-29T16:17:49+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107034","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107034","severity":null,"published_at":"2026-10-29T16:17:49+00:00","modified_at":"2026-10-29T16:17:49+00:00","first_seen_at":"2026-10-29T16:25:55+00:00","fetched_at":"2026-10-29T16:25:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}