---
id: "CVE-2026-55257"
kind: "vulnerability"
aliases: ["CVE-2026-55257"]
title: "Android USB dialog helper: misleading UI lets a local app escalate privilege"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["android", "runtime", "usb"]
not_affected_if: []
published_at: "2026-11-02T20:17:43+00:00"
first_seen_at: "2026-11-02T20:35:28+00:00"
updated_at: "2026-11-02T20:40:41+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55257", "first_seen_at": "2026-11-02T20:35:28+00:00"}]
---

# Android USB dialog helper: misleading UI lets a local app escalate privilege

UsbDialogHelper, the Android Java class that shows USB permission prompts, can display misleading or insufficient UI. The description says this could lead to local privilege escalation without extra execution privileges and without user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-02T20:35:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-55257

## From the sources

In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_