2026-08-27 14:18 UTC
Last week, we received our second responsible disclosure security report. The researcher, "cryze", found an issue in the handling of filepaths in our external sharing mechanism.
Sharing a video from a malicious imported share could lead to app-internal files being overwritten on the iOS and Android apps. This is fixed in v1.27+.
Read more in cryze's excellent blog post: https://cryze.at/posts/travelling-back-a-few-paths-zeitkapsl/
Thank you to the researcher for the excellent disclosure report!
Replies (0)
No replies.