Unrated

Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows...

CVE-2026-107017 First seen on SecPulse Oct 29, 09:00

Original description The description as published by the source.

Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

web cve@mitre.org
web cve@mitre.org
web cve@mitre.org
web nvd.nist.gov
web f-droid.org
web github.com

Key facts

Severity: Unrated
Published: Oct 30, 2026
First seen on SecPulse: Oct 29, 09:00
GHSA: GHSA-w4r7-xv6w-rgmv

NVD GitHub Advisory

Detection sources

NIST National Vulnerability Database01:21
GitHub Security Advisories (Global)00:30
CVE.org (CVE Program・cvelistV5)Oct 29, 23:43