CVE-2026-89229 in BlueLM Copilotinformazioni

Riassunto

di MITRE • 03/11/2026

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai.copilot) allows a malicious application installed on the same device to write arbitrary files via a crafted ACTION_SEND intent with a ContentProvider-supplied file name containing '..' sequences.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Vivo

Prenotare

11/09/2026

Divulgazione

03/11/2026

Moderazione

accettato

EPSS

0.00000

KEV

no

Attività

basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-89229
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-89229
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-89229/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!