CVE-2026-16881

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-16881", "assignerOrgId": "657f3255-0560-4aed-82e4-7f579ec6acfb", "state": "PUBLISHED", "assignerShortName": "LY-Corporation", "dateReserved": "2026-07-24T04:50:38.815Z", "datePublished": "2026-08-04T05:05:34.448Z", "dateUpdated": "2026-08-04T18:57:11.045Z"}, "containers": {"cna": {"affected": [{"vendor": "LY Corporation", "product": "LINE client for Android", "defaultStatus": "affected", "versions": [{"version": "26.7.2", "status": "unaffected", "versionType": "custom", "lessThan": "*"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. \n\nThe profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. \n\nAs a result, an attacker who is able to place crafted content in a profile could cause unintended code to execute with the application's privileges when a victim views that profile. \n\nA server-side mitigation has been deployed that also protects existing Android clients that have not been updated to version 26.7.2."}], "references": [{"url": "https://line.github.io/security-advisory-blog/CVE-2026-16881/"}], "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 8.7, "baseSeverity": "HIGH"}}], "providerMetadata": {"orgId": "657f3255-0560-4aed-82e4-7f579ec6acfb", "shortName": "LY-Corporation", "dateUpdated": "2026-08-04T05:05:34.448Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-04T18:57:00.623149Z", "id": "CVE-2026-16881", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-04T18:57:11.045Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-16881", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-04T18:57:00.623149Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-04T18:57:06.524Z"}}], "cna": {"metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "affected": [{"vendor": "LY Corporation", "product": "LINE client for Android", "versions": [{"status": "unaffected", "version": "26.7.2", "lessThan": "*", "versionType": "custom"}], "defaultStatus": "affected"}], "references": [{"url": "https://line.github.io/security-advisory-blog/CVE-2026-16881/"}], "descriptions": [{"lang": "en", "value": "A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. \n\nThe profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. \n\nAs a result, an attacker who is able to place crafted content in a profile could cause unintended code to execute with the application's privileges when a victim views that profile. \n\nA server-side mitigation has been deployed that also protects existing Android clients that have not been updated to version 26.7.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-94"}]}], "providerMetadata": {"orgId": "657f3255-0560-4aed-82e4-7f579ec6acfb", "shortName": "LY-Corporation", "dateUpdated": "2026-08-04T05:05:34.448Z"}}}, "cveMetadata": {"cveId": "CVE-2026-16881", "state": "PUBLISHED", "dateUpdated": "2026-08-04T18:57:11.045Z", "dateReserved": "2026-07-24T04:50:38.815Z", "assignerOrgId": "657f3255-0560-4aed-82e4-7f579ec6acfb", "datePublished": "2026-08-04T05:05:34.448Z", "assignerShortName": "LY-Corporation"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "LINE client for Android", "vendor": "LY Corporation", "versions": [{"lessThan": "*", "status": "unaffected", "version": "26.7.2", "versionType": "custom"}]}], "source": "dl_cve@linecorp.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. \n\nThe profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. \n\nAs a result, an attacker who is able to place crafted content in a profile could cause unintended code to execute with the application's privileges when a victim views that profile. \n\nA server-side mitigation has been deployed that also protects existing Android clients that have not been updated to version 26.7.2."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n de c\u00f3digo existe en la aplicaci\u00f3n LINE para Android anterior a la versi\u00f3n 26.7.2.\n\nEl componente de renderizado de perfiles no valida adecuadamente o aplica sandbox al contenido de script suministrado externamente incrustado en plantillas de perfil.\n\nComo resultado, un atacante que es capaz de colocar contenido manipulado en un perfil podr\u00eda causar que c\u00f3digo no deseado se ejecute con los privilegios de la aplicaci\u00f3n cuando una v\u00edctima ve ese perfil.\n\nUna mitigaci\u00f3n del lado del servidor ha sido desplegada que tambi\u00e9n protege a los clientes Android existentes que no han sido actualizados a la versi\u00f3n 26.7.2."}], "id": "CVE-2026-16881", "lastModified": "2026-10-23T23:10:00.157", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "dl_cve@linecorp.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-16881", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-04T18:57:00.623149Z", "version": "2.0.3"}}]}, "published": "2026-08-04T06:16:29.810", "references": [{"source": "dl_cve@linecorp.com", "url": "https://line.github.io/security-advisory-blog/CVE-2026-16881/"}], "sourceIdentifier": "dl_cve@linecorp.com", "vulnStatus": "Deferred"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[26.7.2,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "LINE client for Android", "source": "cna", "vendor": "LY Corporation"}, "product": "line_client_for_ios", "vendor": "ly_corporation"}], "created": "2026-08-04T20:30:05.089546+00:00", "title": "Externally\u2011Injected Script Execution in LINE Android Profile Rendering", "updated": "2026-08-07T11:13:24.484298+00:00", "vendors": ["ly_corporation", "ly_corporation$PRODUCT$line_client_for_ios"], "weaknesses": ["CWE-94", "CWE-79"]}