What is GHSA-vm9m-6j35-r47j?

GHSA-vm9m-6j35-r47j is a security advisory published by GitHub Security Advisories with Medium severity. A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability...

Which CVE IDs does GHSA-vm9m-6j35-r47j cover?

GHSA-vm9m-6j35-r47j covers the following CVE IDs: CVE-2026-12190. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vm9m-6j35-r47j?

GHSA-vm9m-6j35-r47j has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-vm9m-6j35-r47jMediumCVSS 5.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability...

Vendor

GitHub Security Advisories

Published

June 15, 2026

Last Modified

June 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-12190 →

📋 Description

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads to improper authorization in handler for custom url scheme. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-12190
https://github.com/actuator/ai.mainfunc.genspark
https://vuldb.com/cve/CVE-2026-12190
https://vuldb.com/submit/825558
https://vuldb.com/vuln/370836
https://vuldb.com/vuln/370836/cti
https://github.com/advisories/GHSA-vm9m-6j35-r47j