File Manager Exposure in Ekia by Ekia Technologies
CVE-2026-81301

8.5HIGH

Key Information:

Vendor

Ekia

Status
File Manager
Vendor
CVE Published:
14 September 2026

What is CVE-2026-81301?

The Ekia File Manager version 1.2.7 has a vulnerability that allows unauthorized access to sensitive files due to its exported ContentProvider, com.ekia.filecontrolmanager.OpenFileProvider, which does not enforce caller permissions. This can lead to local applications gaining access to the filesystem, allowing them to perform sensitive operations such as reading, deleting, or modifying files without proper authorization.

Affected Version(s)

File Manager Android 1.2.7

References

https://fluidattacks.com/advisories/waking
third-party-advisory
https://play.google.com/store/apps/details?id=com.ekia.fi...
product

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrés Ramos
.