CVE-2026-68509 FairEmail: Path traversal in shared attachment handling can write files outside the intended shared directory

FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2325, shared attachment handling does not adequately sanitize an attacker-controlled filename before constructing its destination path. A local attacker-controlled app can therefore supply path componen...