Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and ove

Summary

Insecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

Remediation

1. Inventory every Unknown product deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://f-droid.org/packages/es.pile/
• Referencehttps://github.com/rubenalfon/Pile
• Referencehttps://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107029.md