---
id: CVE-2026-68509
title: >-
  FairEmail: Path traversal in shared attachment handling can write files
  outside the intended shared directory
summary: >-
  FairEmail is a fully featured, open source, privacy-friendly email app for
  Android. Prior to 1.2325, shared attachment handling does not adequately
  sanitize an attacker-controlled filename before constructing its destination
  path. A loca…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-22
vendor: M66B
product: FairEmail
affected:
  - FairEmail < 1.2325
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T22:45:24.203Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-68509'
references:
  - url: 'https://github.com/M66B/FairEmail/security/advisories/GHSA-w92m-2v27-mvg9'
    label: 'https://github.com/M66B/FairEmail/security/advisories/GHSA-w92m-2v27-mvg9'
  - url: >-
      https://github.com/M66B/FairEmail/commit/538523dded741f7a8a76052de9a69806d357c0f4
    label: >-
      https://github.com/M66B/FairEmail/commit/538523dded741f7a8a76052de9a69806d357c0f4
  - url: 'https://github.com/M66B/FairEmail/releases/tag/1.2325'
    label: 'https://github.com/M66B/FairEmail/releases/tag/1.2325'
tags:
  - cve.org
ingestedAt: '2026-11-05T23:41:31.940Z'
epss: 0.00143
epssPercentile: 0.03665
---

## Overview

FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2325, shared attachment handling does not adequately sanitize an attacker-controlled filename before constructing its destination path. A local attacker-controlled app can therefore supply path components that escape the intended shared attachment directory and overwrite or corrupt files in the FairEmail private data directory, including account or message databases. Exploitation requires app lock using PIN or biometric authentication and user interaction to unlock FairEmail. This issue is fixed in version 1.2325.

## Affected

- `FairEmail < 1.2325`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.