CVE-2026-68490: Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.

CVE-2026-68490 · Severity: info · Published 2026-09-23

Executive brief

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts.