---
id: "CVE-2026-58915"
kind: "vulnerability"
aliases: ["CVE-2026-58915"]
title: "Android Automotive: passenger display leaks private notifications and runs actions unlocked"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["android-automotive", "automotive", "mumd", "runtime"]
not_affected_if: ["no-passenger-user", "single-display"]
published_at: "2026-11-02T21:17:35+00:00"
first_seen_at: "2026-11-02T21:35:41+00:00"
updated_at: "2026-11-02T21:37:16+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58915", "first_seen_at": "2026-11-02T21:35:41+00:00"}]
---

# Android Automotive: passenger display leaks private notifications and runs actions unlocked

On Android Automotive OS with multi-user multi-display, a physical occupant at the passenger screen can see sensitive heads-up notification content from a secure passenger user. The same flaw lets them trigger notification actions for that user without entering credentials.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-02T21:35:41+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-58915

## From the sources

A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up Notification (HUN) content and execute actions for a secure passenger user (User N) without authenticating. This bypasses the PassengerKeyguard because the HUN system only checks the global keyguard state, which is tied to the driver's unlocked display, and the PassengerKeyguard implementation fails to suppress HUNs or intercept action PendingIntents. Consequently, private notification data is disclosed, and user-N actions are executed without credential verification.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_