CVE-2026-107033

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.

Published

2026-10-29

Modified

2026-10-29

Record from

the NVD, synced 2026-10-29

References

• https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107033.md
• https://github.com/MirakelX/mirakel-android

Check your stackJSON