A critical local privilege escalation vulnerability in Android 15 allows unauthorized access to user files without requiring user interaction.

The flaw resides in the getDestinationForApp function of SpaAppBridgeActivity, where a logic error facilitates unauthorized cross-user file access. This vulnerability permits local escalation of privilege by an attacker with low privileges, requiring no user interaction.

The CVSS score of 7.8 (High) reflects the significant risk posed by this vulnerability, as it allows for the compromise of data confidentiality and integrity. Successful exploitation could lead to unauthorized access to sensitive user files, potentially resulting in data exfiltration or system-wide compromise on affected mobile devices.

Immediate Action: Organizations should monitor the official Android Security Bulletin for the release of a security patch and deploy it to all affected Android 15 devices as soon as it becomes available.

Proactive Monitoring: Security teams should review device access logs for anomalous behavior related to application activity and file access requests.

Compensating Controls: Ensure that enterprise mobile management (EMM) policies are strictly enforced to limit the installation of untrusted applications, which reduces the likelihood of an attacker gaining the necessary local access to trigger the flaw.

Public Exploit Available: Unknown.

Given the severity of this local privilege escalation flaw, administrators must prioritize the deployment of the forthcoming Android security update across their fleet. Until the patch is applied, maintain a strict posture regarding application permissions and device management to minimize the attack surface available to potential local threats.