Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
CVE-2025-50862: Lotus Cars Android App Exposes User Data on Rooted or Debug-Enabled Devices
CVE-2025-50862 · published 1 year ago
Summary
The Lotus Cars Android app stores user data in a way that can be accessed by hackers who have gained root access to their device or have enabled debugging features. This means that sensitive user information could be stolen. Users who use rooted or debug-enabled devices should review their app settings to ensure they are not storing sensitive data.
Original advisory text
The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents ...
The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-200Information Exposure
Timeline
Published14 Aug 2025
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta