CVE-2026-101886: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Cisco Jabber for Android

Cisco Jabber for Android (com.cisco.im) versions prior to 15.3.1.311364 contain a path traversal vulnerability via the exported crosslaunch.share activity. An attacker can craft a content URI with a display name containing '../' sequences, which is not sanitized, allowing writing of files into restricted directories such as databases/, shared_prefs/, no_backup/, and files/. This occurs without requiring any permissions or user interaction, potentially enabling unauthorized file manipulation within the app's private data.

The vulnerability allows an unprivileged malicious app to write attacker-controlled files into the private data directories of Cisco Jabber for Android. This could lead to data tampering or corruption within the app's environment. However, there is no indication of privilege escalation or remote code execution. The CVSS score is 5.1 (medium severity), reflecting limited attack vector (local), low complexity, and no user interaction required.

A fix is available in Cisco Jabber for Android version 15.3.1.311364 and later. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are indicated in the available data.