CVE-2026-28632
NoneCVSS
—
EPSS
0.1%
Published
Nov 2, 2026
CISA due date
—
The record
In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|