Unscored severity · published Oct 29, 2026
CVE-2026-107034
Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data
New
–
CVSS
–
EPSS
No
On KEV
Description
Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note data.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-107034
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-107034
f-droid.org
https://f-droid.org/packages/com.git.amarradi.leafpad/
github.com
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107034.md
github.com
https://github.com/amarradi/leafpad_Android