Vulnerability · Published Sep 14, 2026 · Assigned by Fluid Attacks
CVE-2026-81301Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access
High 8.5
In plain English
A high-severity security flaw in File Manager from Ekia. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Official description
Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File(...). It then supports query(), openFile(), and delete() operations. Because the provider is exported and lacks android:permission, android:readPermission, or android:writePermission, another local application can access the provider authority and cause File Manager's process to read, create, overwrite, or delete files that are accessible to that process.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ekia | File Manager | 1.2.7 |
Weakness: CWE-926 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
References
- https://fluidattacks.com/advisories/waking third-party-advisory
- https://play.google.com/store/apps/details?id=com.ekia.files.manager product