CVE-2026-107033 PUBLISHED

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthorized attackers to arbitrarily read and modify another user's task database.

• https://github.com/MirakelX/mirakel-android
• https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107033.md

• n/a text