Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-84283 EUVD-2026-86481GHSA-vx3q-gcj3-hmg7

FluteCode Secure Folder 1.2 -Plaintext vault files in shared storage bypass the PIN gate

Published Sep 24, 2026 · Updated Sep 25, 2026 · Assigned by Fluid Attacks

Description

Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Folder.

Affected products

VendorProductAffectedFixed
FluteCode Secure Folder 1.2 —

References