CVE-2026-49187: Exposure of Sensitive Information to an Unauthorized Actor

The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse...