Vulnerability in Flutecode Secure Folder
CVE-2026-84283
Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Folder.
Published · last modified .
EPSS exploit prediction
EPSS: 0.001 (1.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 1st percentile — 1.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- Flutecode Secure Folder — versions 1.2
Weakness classification (CWE)
References
- fluidattacks.com/advisories/sanguisugabogg (third-party-advisory)
- play.google.com/store/apps/details (product)