This vulnerability in iAI Lab PDF AI App 4.21.0 affects the getExternalCacheDir function within the chatpdf.pro component on Android. By manipulating the _display_name argument, a local attacker with limited privileges can perform a path traversal attack, potentially accessing or modifying files outside the intended directory. The vulnerability has a CVSS 4.8 (medium) score, indicating moderate impact. The vendor has not issued any patch or advisory, and exploit code is publicly available.

An attacker with local access and low privileges can exploit this vulnerability to traverse directories via the _display_name argument, potentially accessing or modifying files outside the application's cache directory. This could lead to unauthorized file access or data exposure within the local device environment. There is no indication of remote exploitation or privilege escalation beyond the local user context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should avoid running untrusted code or files within the app and restrict local access to trusted users only. Monitor for vendor updates or new versions addressing this issue.