PT-2026-49147 · Genspark · Genspark Ai Workspace App

Actuator · CVE-2026-12190 · Published 2026-06-14 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Genspark AI Workspace App version 2.8.4

Description An issue exists in the ai.mainfunc.genspark component of the Android application. Improper authorization occurs within the handler for custom URL schemes, which can be exploited by an attacker from a local environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-939

CWE-285

Related Identifiers

CVE-2026-12190

Affected Products

Genspark Ai Workspace App

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-12190 · Security Note
• https://vuldb.com/submit/825558 · Note
• https://t.me/cveNotify/220175 · Telegram Post
• https://vuldb.com/cve/CVE-2026-12190 · Note
• https://vuldb.com/vuln/370836 · Note
• https://t.me/CVEtracker/56816 · Telegram Post
• https://vuldb.com/vuln/370836/cti · Note
• https://github.com/actuator/ai.mainfunc.genspark · Note