CVE-2026-59028 is a high-severity vulnerability in the resolveAidConflictLocked method of RegisteredAidCache.java that allows a local attacker to bypass permissions due to a confused deputy issue. Exploitation does not require additional execution privileges or user interaction, potentially enabling local privilege escalation.