{"id":"CVE-2026-58915","kind":"vulnerability","aliases":["CVE-2026-58915"],"related":[],"title":"Android Automotive: passenger display leaks private notifications and runs actions unlocked","description":"A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content and execute actions for a secure passenger user (User N) without authenticating. This bypasses the PassengerKeyguard because the HUN system only checks the global keyguard state, which is tied to the driver's unlocked display, and the PassengerKeyguard implementation fails to suppress HUNs or intercept action PendingIntents. Consequently, private notification data is disclosed, and user-N actions are executed without credential verification.","summary":"On Android Automotive OS with multi-user multi-display, a physical occupant at the passenger screen can see sensitive heads-up notification content from a secure passenger user. The same flaw lets them trigger notification actions for that user without entering credentials.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android-automotive","automotive","mumd","runtime"],"not_affected_if":["no-passenger-user","single-display"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T21:17:35+00:00","first_seen_at":"2026-11-02T21:35:41+00:00","triaged_at":"2026-11-02T21:37:16+00:00","updated_at":"2026-11-02T21:37:16+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-11-02T21:37:16Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android Automotive: passenger display leaks private notifications and runs actions unlocked","impact":"medium","summary":"On Android Automotive OS with multi-user multi-display, a physical occupant at the passenger screen can see sensitive heads-up notification content from a secure passenger user. The same flaw lets them trigger notification actions for that user without entering credentials.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["android-automotive","automotive","mumd"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Private notification content is read and user actions run without credentials","analyst_note":"Find the AAOS security bulletin and the NVD entry for affected versions and the fixed patch level.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["single-display","no-passenger-user"],"who_is_affected":"Affects Android Automotive OS vehicles using multi-user multi-display with a passenger display and a secured passenger user. The sources do not name affected builds or patch levels. Systems without MUMD passenger displays are unlikely to be exposed.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000648,"input_tokens":4226,"output_tokens":451,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-58915':14A,17A 'aao':77C 'action':10A,62B,98C,141C,153C 'android':1A,19B,25B,74C 'android-automot':18B 'authent':107C 'automot':2A,20B,21B,26B,75C 'bypass':109C 'check':117C 'consequ':143C 'content':49B,95C 'credenti':68B,157C 'cve':12A,15A 'data':146C 'disclos':148C 'display':4A,34B,83C,86C,130C 'driver':127C 'enter':67B 'execut':97C,155C 'fail':135C 'flaw':57B 'global':119C 'head':46B,91C 'heads-up':45B,90C 'hun':94C,114C,138C 'implement':134C 'intercept':140C 'keyguard':120C 'leak':5A 'let':58B 'multi':30B,33B,79C,82C 'multi-display':32B,81C 'multi-us':29B,78C 'mumd':22B,84C 'n':105C,152C 'notif':7A,48B,61B,93C,145C 'occup':37B,71C 'os':27B,76C 'passeng':3A,40B,53B,85C,102C 'passengerkeyguard':111C,133C 'pendingint':142C 'physic':36B,70C 'privat':6A,144C 'run':9A 'runtim':23B 'screen':41B 'secur':52B,101C 'see':43B 'sensit':44B,89C 'state':121C 'suppress':137C 'system':115C 'tie':124C 'trigger':60B 'unlock':11A,129C 'user':31B,54B,65B,80C,103C,104C,151C 'user-n':150C 'verif':158C 'view':88C 'without':66B,106C,156C","nicknames":[],"mitigations":[],"who_affected":"Affects Android Automotive OS vehicles using multi-user multi-display with a passenger display and a secured passenger user. The sources do not name affected builds or patch levels. Systems without MUMD passenger displays are unlikely to be exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["androidautomotive","automotive","mumd","runtime","unknown"],"first_public_at":"2026-11-02T21:17:35+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58915","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58915","severity":null,"published_at":"2026-11-02T21:17:35+00:00","modified_at":"2026-11-02T21:17:35+00:00","first_seen_at":"2026-11-02T21:35:41+00:00","fetched_at":"2026-11-02T21:35:41+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}