{"id":"CVE-2026-107052","kind":"vulnerability","aliases":["CVE-2026-107052"],"related":[],"title":"ProjectMAXS MAXS FileRead module lets attackers read files outside sandbox","description":"Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.","summary":"The MAXS Module FileRead component, version code 27, exposes its AIDL interface without proper permission checks. An unauthorized attacker can read arbitrary files outside the app sandbox by supplying an absolute path.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","mobile","other","projectmaxs"],"not_affected_if":["component-not-installed"],"how_to_check":"- Check whether the MAXS Module FileRead component (ProjectMAXS) is installed in the app, at `versionCode 27`","fix":null,"status":"open","published_at":"2026-10-29T17:17:57+00:00","first_seen_at":"2026-10-29T17:26:16+00:00","triaged_at":"2026-10-29T17:28:07+00:00","updated_at":"2026-10-29T17:28:07+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-29T17:28:07Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"ProjectMAXS MAXS FileRead module lets attackers read files outside sandbox","impact":"medium","summary":"The MAXS Module FileRead component, version code 27, exposes its AIDL interface without proper permission checks. An unauthorized attacker can read arbitrary files outside the app sandbox by supplying an absolute path.","audience":"everyone","category":"other","nicknames":[],"who_cares":["android","projectmaxs","mobile"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker reads arbitrary files outside the app sandbox","analyst_note":"Confirm which products bundle MAXS Module FileRead, the reach of the AIDL interface, and whether a fixed version exists; check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-107052.","how_to_check":"- Check whether the MAXS Module FileRead component (ProjectMAXS) is installed in the app, at `versionCode 27`\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["component-not-installed"],"who_is_affected":"Devices or apps that bundle the ProjectMAXS MAXS Module FileRead component at versionCode 27. The sources do not say which products ship it or whether a fixed version exists.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000669,"input_tokens":4107,"output_tokens":516,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-107052':13A,16A '-2026':12A,15A '27':28B,65C 'absolut':51B,80C 'aidl':31B,57C 'allow':66C 'android':17B 'app':46B 'arbitrari':42B 'arbitrarili':70C 'attack':6A,39B,68C 'check':36B 'code':27B 'compon':25B 'cve':11A,14A 'expos':29B 'file':8A,43B,72C 'fileread':3A,24B,63C 'insecur':53C 'interfac':32B,58C 'let':5A 'max':2A,22B,61C 'mobil':18B 'modul':4A,23B,62C 'outsid':9A,44B,73C 'path':52B,81C 'permiss':35B,54C 'projectmax':1A,20B,60C 'proper':34B 'provid':78C 'read':7A,41B 'reead':71C 'sandbox':10A,47B,76C 'suppli':49B 'unauthor':38B,67C 'version':26B 'versioncod':64C 'via':77C 'without':33B","nicknames":[],"mitigations":[],"who_affected":"Devices or apps that bundle the ProjectMAXS MAXS Module FileRead component at versionCode 27. The sources do not say which products ship it or whether a fixed version exists.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"first_public_at":"2026-10-29T17:17:57+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107052","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107052","severity":null,"published_at":"2026-10-29T17:17:57+00:00","modified_at":"2026-10-29T17:17:57+00:00","first_seen_at":"2026-10-29T17:26:16+00:00","fetched_at":"2026-10-29T17:26:16+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}