Permission Control Vulnerability in Huawei File Preview Module
CVE-2026-41980

5.5MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Vendor
CVE Published:
9 June 2026

What is CVE-2026-41980?

A permission control vulnerability has been identified in the file preview module by Huawei. This flaw could allow unauthorized access to sensitive files, potentially compromising the confidentiality of the services reliant on this module. Exploitation of this vulnerability may lead to unauthorized viewing or manipulation of files, necessitating immediate attention from users to mitigate risks associated with service security.

Affected Version(s)

HarmonyOS 6.1.0

HarmonyOS 6.0.0

References

https://consumer.huawei.com/en/support/bulletin/2026/6/
https://consumer.huawei.com/en/support/bulletinvision/202...
https://consumer.huawei.com/en/support/bulletinlaptops/20...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.