Description
Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (One-Time Password) mechanism, causing a desynchronization of the timing.
High · 7.5
CVE-2026-107030
EUVD-2026-113182GHSA-79r3-vgv7-xfwr
Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard (…
Published Oct 29, 2026 · Updated Nov 2, 2026 · Assigned by mitre