Description
Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joyland | Joyland.ai | — | — |
Medium · 4.3
CVE-2026-102670
EUVD-2026-91029GHSA-ccrc-wwj2-gmgv
Joyland AI enables HTTP
Published Oct 1, 2026 · Updated Oct 11, 2026 · Assigned by cisa-cg