RCE in Ly Corporation Line Client For Android

CVE-2026-16881

A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a resul…

Vulnerability class: RCE (Remote Code Execution)

Affected products

Weakness classification (CWE)

References