CVE-2026-107027

None

CVSS

—

EPSS

0.2%

Published

Oct 29, 2026

CISA due date

—

The record

Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and overwriting.

Affected packages

Ecosystem	Package	Introduced	Fixed