{"id":"CVE-2026-55257","kind":"vulnerability","aliases":["CVE-2026-55257"],"related":[],"title":"Android USB dialog helper: misleading UI lets a local app escalate privilege","description":"In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"UsbDialogHelper, the Android Java class that shows USB permission prompts, can display misleading or insufficient UI. The description says this could lead to local privilege escalation without extra execution privileges and without user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","runtime","usb"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:43+00:00","first_seen_at":"2026-11-02T20:35:28+00:00","triaged_at":"2026-11-02T20:40:41+00:00","updated_at":"2026-11-02T20:40:41+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-11-02T20:40:41Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android USB dialog helper: misleading UI lets a local app escalate privilege","impact":"high","summary":"UsbDialogHelper, the Android Java class that shows USB permission prompts, can display misleading or insufficient UI. The description says this could lead to local privilege escalation without extra execution privileges and without user interaction.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["android","usb"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local app gains elevated privileges on the device","analyst_note":"Find the affected Android versions and the vendor bulletin entry for CVE-2026-55257 on the NVD page, and confirm whether a patch level fixes it.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The description names only UsbDialogHelper.java and does not list affected Android versions or builds, so the sources do not say which devices are exposed. Check the vendor's Android security bulletin for your device model before assuming you are covered.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000626,"input_tokens":4110,"output_tokens":430,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-55257':15A,18A 'addit':82C 'android':1A,19B,24B 'app':10A 'class':26B 'confus':65C 'could':42B,73C 'cve':13A,16A 'descript':39B 'dialog':3A 'display':33B 'due':66C 'escal':11A,47B,77C 'execut':50B,83C 'exploit':92C 'extra':49B 'helper':4A 'insuffici':36B,70C 'interact':55B,87C 'java':25B 'lead':43B,74C 'let':7A 'local':9A,45B,76C 'mislead':5A,34B,68C 'need':85C,90C 'permiss':30B 'possibl':63C 'privileg':12A,46B,51B,79C,84C 'prompt':31B 'runtim':20B 'say':40B 'show':28B 'ui':6A,37B,64C,71C 'usb':2A,21B,29B 'usbdialoghelp':22B,57C 'usbdialoghelper.java':59C 'user':54B,86C 'without':48B,53B","nicknames":[],"mitigations":[],"who_affected":"The description names only UsbDialogHelper.java and does not list affected Android versions or builds, so the sources do not say which devices are exposed. Check the vendor's Android security bulletin for your device model before assuming you are covered.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","runtime","unknown","usb"],"first_public_at":"2026-11-02T20:17:43+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-55257","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55257","severity":null,"published_at":"2026-11-02T20:17:43+00:00","modified_at":"2026-11-02T20:17:43+00:00","first_seen_at":"2026-11-02T20:35:28+00:00","fetched_at":"2026-11-02T20:35:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}