CVE-2026-81301
Received Received - Intake

Unauthorized File Access in Ekia File Manager 1.2.7

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: Fluid Attacks

Description
Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File(...). It then supports query(), openFile(), and delete() operations. Because the provider is exported and lacks android:permission, android:readPermission, or android:writePermission, another local application can access the provider authority and cause File Manager's process to read, create, overwrite, or delete files that are accessible to that process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-81301
EUVD
EUVD-2026-77584

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ekia file_manager 1.2.7

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-926 The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Ekia File Manager 1.2.7 has an exported Android ContentProvider named com.ekia.filecontrolmanager.OpenFileProvider that lacks proper access controls. This allows any local app to interact with it without permissions. The provider maps caller-controlled URI paths directly to filesystem paths without validation, enabling unauthorized file operations like reading, writing, overwriting, or deleting files accessible to the File Manager process.

Detection Guidance

To detect this vulnerability, check if Ekia File Manager 1.2.7 is installed on your Android device. Inspect the app's manifest for an exported ContentProvider named com.ekia.filecontrolmanager.OpenFileProvider without permission restrictions. Use Android debugging tools like adb to query the provider and verify if it allows unauthorized file operations.

Impact Analysis

Any malicious local app on your device could exploit this to access, modify, or delete files that the File Manager can access. This includes sensitive files like documents, media, or app data. Since no authentication or user interaction is required, the risk is high for users with this app installed.

Compliance Impact

This vulnerability could lead to unauthorized access or deletion of sensitive data, violating GDPR's data integrity and confidentiality requirements or HIPAA's safeguards for protected health information. Organizations using this app may face compliance violations if exploited.

Mitigation Strategies

Immediately uninstall Ekia File Manager 1.2.7 from your device. Avoid installing untrusted apps that may exploit this vulnerability. Monitor for unusual file access or modifications. Check for app updates from the developer that may patch this issue. If no patch is available, consider using alternative file management applications.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81301. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart