Live › vulnerability › CVE-2026-107035
The OMN Outline notes app for Markdown, version code 3400, has an insecure permissions flaw in its Page.java component. An unauthorized attacker can write content into another user's private storage using a crafted payload.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:25 UTC. All times on this page are UTC.
Users of the MBasov OMN Outline notes Markdown app, version code 3400, are the affected population named by the source. The sources do not say whether a server component, a sync feature or a local-only install is needed to reach the flaw, so the exposure path is unknown.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload.
This page as .md · .json · in your agent: get_signal("CVE-2026-107035")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.