{"id":"CVE-2026-58867","kind":"vulnerability","aliases":["CVE-2026-58867"],"related":[],"title":"Android: missing permission check in Wi-Fi Direct service lets apps escalate privilege","description":"In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A missing permission check in the Wi-Fi P2P service's getMessenger method lets an app bypass a permission requirement. The sources say this leads to local privilege escalation with no extra execution privileges and no user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","infrastructure","mobile","wifi-direct"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:49+00:00","first_seen_at":"2026-11-02T20:35:31+00:00","triaged_at":"2026-11-02T20:38:58+00:00","updated_at":"2026-11-02T20:38:58+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-02T20:38:58Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android: missing permission check in Wi-Fi Direct service lets apps escalate privilege","impact":"high","summary":"A missing permission check in the Wi-Fi P2P service's getMessenger method lets an app bypass a permission requirement. The sources say this leads to local privilege escalation with no extra execution privileges and no user interaction.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["android","mobile","wifi-direct"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Local app gains elevated system privileges without permission","analyst_note":"Find the affected Android versions and patch level from the NVD entry or the Android Security Bulletin.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources describe a flaw in the Android Wi-Fi P2P service (WifiP2pServiceImpl.java) and do not list affected Android versions or builds. Devices running Android system updates from the vendor's security bulletin should be checked against that bulletin.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00063,"input_tokens":4100,"output_tokens":439,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-58867':17A,20A 'addit':92C 'android':1A,21B 'app':12A,43B 'bypass':44B,75C 'check':4A,30B,81C 'could':83C 'cve':15A,18A 'direct':9A,26B 'due':76C 'escal':13A,56B,87C 'execut':60B,93C 'exploit':102C 'extra':59B 'fi':8A,35B 'getmesseng':39B,67C 'infrastructur':22B 'interact':65B,97C 'lead':52B,84C 'let':11A,41B 'local':54B,86C 'method':40B 'miss':2A,28B,79C 'mobil':23B 'need':95C,100C 'p2p':36B 'permiss':3A,29B,46B,74C,80C 'possibl':73C 'privileg':14A,55B,61B,89C,94C 'requir':47B 'say':50B 'servic':10A,37B 'sourc':49B 'user':64B,96C 'wi':7A,34B 'wi-fi':6A,33B 'wifi':25B 'wifi-direct':24B 'wifip2pserviceimpl.java':69C","nicknames":[],"mitigations":[],"who_affected":"The sources describe a flaw in the Android Wi-Fi P2P service (WifiP2pServiceImpl.java) and do not list affected Android versions or builds. Devices running Android system updates from the vendor's security bulletin should be checked against that bulletin.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","infrastructure","mobile","unknown","wifidirect"],"first_public_at":"2026-11-02T20:17:49+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58867","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58867","severity":null,"published_at":"2026-11-02T20:17:49+00:00","modified_at":"2026-11-02T20:17:49+00:00","first_seen_at":"2026-11-02T20:35:31+00:00","fetched_at":"2026-11-02T20:35:31+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}