{"id":"CVE-2026-58994","kind":"vulnerability","aliases":["CVE-2026-58994"],"related":[],"title":"Android NFC service: missing permission check allows local privilege escalation","description":"In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"Several functions in the Android NFC service (NfcService.java) skip a permission check, so an app can perform actions it should not be allowed to. An attacker with a local app can escalate privileges without extra execution rights and without user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","infrastructure","mobile","nfc"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:54+00:00","first_seen_at":"2026-11-02T20:35:35+00:00","triaged_at":"2026-11-02T20:37:09+00:00","updated_at":"2026-11-02T20:37:09+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-02T20:37:09Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Android NFC service: missing permission check allows local privilege escalation","impact":"high","summary":"Several functions in the Android NFC service (NfcService.java) skip a permission check, so an app can perform actions it should not be allowed to. An attacker with a local app can escalate privileges without extra execution rights and without user interaction.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["android","nfc","mobile"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"A local app gains elevated system privileges on the device.","analyst_note":"Check the Android Security Bulletin for the patch level that fixes CVE-2026-58994 and which devices are affected.","how_to_check":"- unknown","plain_action":"Install the latest Android system update on your phone once your manufacturer releases it.","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Devices running an Android build with the affected NFC service code. The sources do not name affected Android versions or patch levels. Devices where NFC is not present or the affected code path is not shipped can likely skip it, but the sources do not confirm this.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000635,"input_tokens":4084,"output_tokens":453,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-58994':13A,16A 'action':38B 'addit':89C 'allow':7A,43B 'android':1A,17B,25B 'app':35B,50B 'attack':46B 'bypass':72C 'check':6A,32B,78C 'could':80C 'cve':11A,14A 'due':73C 'escal':10A,52B,84C 'execut':56B,90C 'exploit':99C 'extra':55B 'function':22B,64C 'infrastructur':18B 'interact':61B,94C 'lead':81C 'local':8A,49B,83C 'miss':4A,76C 'mobil':19B 'multipl':63C 'need':92C,97C 'nfc':2A,20B,26B 'nfcservice.java':28B,66C 'perform':37B 'permiss':5A,31B,71C,77C 'possibl':70C 'privileg':9A,53B,86C,91C 'right':57B 'servic':3A,27B 'sever':21B 'skip':29B 'user':60B,93C 'without':54B,59B","nicknames":[],"mitigations":[],"who_affected":"Devices running an Android build with the affected NFC service code. The sources do not name affected Android versions or patch levels. Devices where NFC is not present or the affected code path is not shipped can likely skip it, but the sources do not confirm this.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"Install the latest Android system update on your phone once your manufacturer releases it.","pkeys":[],"ptokens":[],"labels":["android","infrastructure","mobile","nfc","unknown"],"first_public_at":"2026-11-02T20:17:54+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58994","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58994","severity":null,"published_at":"2026-11-02T20:17:54+00:00","modified_at":"2026-11-02T20:17:54+00:00","first_seen_at":"2026-11-02T20:35:35+00:00","fetched_at":"2026-11-02T20:35:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}