A critical vulnerability in Ekia File Manager 1.2.7 allows unauthenticated local applications to perform unauthorized file operations, posing a significant risk to data integrity and privacy.

The application incorrectly exposes its ContentProvider component without mandatory permission checks. This allows any malicious local application to interact with the provider to manipulate files on the device filesystem.

The vulnerability carries a CVSS score of 8.5, reflecting a high severity due to the potential for total loss of file integrity and confidentiality on the affected device. Successful exploitation allows unauthorized entities to exfiltrate sensitive user data or corrupt critical application files, which could lead to significant privacy breaches and potential device instability.

Immediate Action: Users should check the Google Play Store for the latest version of Ekia File Manager and apply updates immediately. If no update is available, consider restricting the use of this application until a patch is released by the vendor.

Proactive Monitoring: Security teams should monitor device logs for unexpected file access patterns or suspicious attempts to interface with the com.ekia.filecontrolmanager.OpenFileProvider authority.

Compensating Controls: Implement mobile device management (MDM) policies to restrict the installation of untrusted or unauthorized applications, thereby reducing the attack surface for local exploitation.

Public Exploit Available: Unknown

This vulnerability represents a severe security oversight that grants unauthorized local actors excessive control over the application's filesystem interactions. Organizations utilizing this software should prioritize remediation and ensure that all mobile endpoints are running the most secure version available. Until a patch is verified, minimizing the presence of third party applications on devices running this software is recommended to limit the available attack surface.