Canvoki (VersionCode 14) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/canvoki-versioncode-14/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 30 Oct 2026 19:37:04 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgcanvoki: Unauthorized automated action triggering (CVE-2026-107017)https://feed.craftedsignal.io/briefs/2026-10-canvoki-insecure-permissions/Fri, 30 Oct 2026 19:37:04 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-canvoki-insecure-permissions/An insecure permission vulnerability in the ShortcutDispatchActivity component of canvoki version 14 allows unauthorized attackers to arbitrarily trigger another user's configured automated actions.<p>CVE-2026-107017 identifies an insecure permission vulnerability in the ShortcutDispatchActivity component of canvoki versionCode 14. This flaw allows unauthorized attackers to arbitrarily trigger automated actions configured by other users. The vulnerability has a CVSS v3.1 base score of 9.1.</p> criticaladvisory