vivo BlueLM Copilot

• CVE-2026-89229 Medium 5.1 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM Copilot (com.vivo.ai.copilot) allows a malicious application installed on the sa 0.2%