Description
The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure.
Medium · 5.9
CVE-2025-50862
EUVD-2025-24940GHSA-8v38-hfvf-3c25
The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB…
Published Aug 14, 2025 · Updated Jul 5, 2026 · Assigned by mitre