Vulnerability in Flutecode Secure Folder
CVE-2026-84283
Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Folder.
Published .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Flutecode Secure Folder — versions 1.2
Weakness classification (CWE)
References
- fluidattacks.com/advisories/sanguisugabogg (third-party-advisory)
- play.google.com/store/apps/details (product)