Vulnerability Description
Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.
References
- https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026
- https://github.com/MirakelX/mirakel-android
FAQ
What is CVE-2026-107033?
CVE-2026-107033 is a documented vulnerability. Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.
How severe is CVE-2026-107033?
CVSS scoring is not yet available for CVE-2026-107033. Check NVD for updates.
Is there a patch for CVE-2026-107033?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.