Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
1.9
CVE-2026-109106: Polaris Office App Android lets files be saved outside safe folder
CVE-2026-109106 · published 5 days ago
Summary
The Android version of Polaris Office App (9.9.19) can be tricked into saving a document in any location on the device because it does not correctly check the file name you give it. This could let someone with access to the phone place or overwrite files where they shouldn’t be. Update the app to version 9.9.22, which adds the needed checks, to remove the risk.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| polaris | office app | 9.9.19 |
Original advisory text
Polaris Office App Document Intake com.infraware.service.m.n.a path traversal
A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function com.infraware.service.m.n.a of the component Document Intake. The manipulation of the argument _display_name results in path traversal. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. Upgrading to version 9.9.22 addresses this issue. It is recommended to upgrade the affected component. The vendor confirms: "We added path validation logic to ensure that files are created only within the designated temporary directory."
References
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-22Path Traversal
Timeline
Published13 Oct 2026
Updated16 Oct 2026
First seen13 Oct 2026
Track software like this
Free during beta