Description
Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message.
Critical · 9.1
CVE-2026-107056
EUVD-2026-113258GHSA-rr7h-x9xq-c35g
Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to injec…
Published Oct 29, 2026 · Updated Nov 4, 2026 · Assigned by mitre