CVE-2026-22694 AliasVault is Missing Origin Validation in Android Passkey Credential Provider

AliasVault is a privacy-first password manager with built-in email aliasing. AliasVault Android versions 0.24.0 through 0.25.2 contained an issue in how passkey requests from Android apps were validated. Under certain local conditions, a malicious app could attempt to obtain a passkey response fo...

PT-2026-2917

Name of the Vulnerable Software and Affected Versions AliasVault versions 0.24.0 through 0.25.2 Description AliasVault is a privacy-first password manager with built-in email aliasing. Versions of AliasVault for Android had a problem with how requests for passkeys from Android applications were...