NVD security advisoryHigh
High advisory for In shouldBlockDirectoryFromTree of Exter
CVE-2026-28588 · Reported 2 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
In shouldBlockDirectoryFromTree of ExterJava ecosystem
Advisory overview
In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
