CVE-2026-38093

file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10, is vulnerable to path traversal (CWE-22) in its Android implementation. The openFileStream() method in FileUtils.kt uses the DISPLAY_NAME obtained from ContentResolver.query() directly in file path construction without sanitization. A malicious Android app with a crafted ContentProvider can return a filename containing ../ sequences, causing the plugin to create arbitrary files and directories outside the intended cache directory within the victim app's internal storage. Existing files are not overwritten due to an existence check.

• CWE-22

• https://github.com/miguelpruivo/flutter_file_picker
• https://github.com/miguelpruivo/flutter_file_picker/issues/1967
• https://pub.dev/packages/file_picker

Published

Aug 28, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-38064Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Comma…9.8
• CVE-2026-38065Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Comma…9.8
• CVE-2026-3807A security vulnerability has been detected in Tenda FH1202 1…8.8
• CVE-2026-38076An integer overflow in the jbig2_arith_iaid_ctx_new() functi…7.5
• CVE-2026-3808A vulnerability was detected in Tenda FH1202 1.2.0.14(408). …8.8
• CVE-2026-3809A flaw has been found in Tenda FH1202 1.2.0.14(408). The imp…8.8
• CVE-2026-3810A vulnerability has been found in Tenda FH1202 1.2.0.14(408)…8.8
• CVE-2026-3811A vulnerability was found in Tenda FH1202 1.2.0.14(408). Thi…8.8
• CVE-2026-3812A vulnerability was determined in itsourcecode Payroll Manag…6.1
• CVE-2026-3813A vulnerability was identified in opencc JFlow up to 5badc00…9.8
• CVE-2026-3814A security flaw has been discovered in UTT HiPER 810G up to …8.8
• CVE-2026-38142An unauthenticated command injection vulnerability in the /g…6.5