Local Privilege Escalation Vulnerability in Android's ActivityClientController

CVE-2026-58946

What is CVE-2026-58946?

A vulnerability exists in the ActivityClientController of the Android operating system, where a logic error in the navigateUpTo function may lead to a potential permission bypass. This issue allows escalation of privileges on the device without requiring additional execution privileges or user interaction, posing a security risk that could be exploited by local attackers.

References