CVE-2026-107045

Critical

Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to…

mitre·CWE-732·Published 2026-10-29

CVSS

9.1

EPSS

0.00

KEV

Exploits

cve.orgen

177 chars

Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database.

NVDen

177 chars

Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database.

CVE-2026-107045

CVSS metrics across sources