CyberRota Analysis
AI-GeneratedMicroXR Blobstore is vulnerable due to a missing permission check, allowing unauthorized access to files from other applications. This critical flaw enables local privilege escalation without requiring user interaction, posing significant risks to data confidentiality and integrity. Organizations utilizing MicroXR Blobstore should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.