CVE-2026-28597 is a high-severity vulnerability in the writeGrantedUriPermissions function of UriGrantsManagerService.java. It involves a permission bypass caused by improper input validation, allowing local privilege escalation without requiring additional execution privileges or user interaction.