---
id: "CVE-2026-107047"
kind: "vulnerability"
aliases: ["CVE-2026-107047"]
title: "GPSLogger Android app: flawed permissions let attackers alter its log data"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["android", "gpslogger", "package"]
not_affected_if: ["not-installed", "other-versioncode"]
published_at: "2026-10-29T17:17:57+00:00"
first_seen_at: "2026-10-29T17:26:16+00:00"
updated_at: "2026-10-29T17:28:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107047", "first_seen_at": "2026-10-29T17:26:16+00:00"}]
---

# GPSLogger Android app: flawed permissions let attackers alter its log data

GPSLogger versionCode 137 for Android grants insecure permissions that let an unauthorized app or party change how the app writes its logs. An attacker can therefore manipulate the logged location data.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed GPSLogger version in the app's About screen or with `adb shell dumpsys package com.mendhak.gpslogger | grep versionCode`
- Confirm whether the installed `versionCode` is `137`

## Timeline

- 2026-10-29T17:26:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107047

## From the sources

Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_