Permission Bypass Vulnerability in Android Automotive OS

CVE-2026-28648

What is CVE-2026-28648?

A vulnerability in the Android Automotive OS allows for a potential permission bypass due to a confused deputy situation. This flaw enables a local escalation of privileges without requiring additional execution permissions or user interaction for exploitation. As such, it presents a significant security risk, allowing unauthorized access and actions within the system.

References