SZB-fb35f820dc
Gallery - Private Photo Vault 1.0.41 exposes unauthenticated local file server (EUVD-2026-77755)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Brain Trust
- Product
- Gallery - Private Photo Vault
- First seen
Summary
The EU Vulnerability Database lists an issue in Gallery - Private Photo Vault 1.0.41, scored 7.1 (CVSS v3.1). The listing says the app starts an unauthenticated HTTP server on TCP port 8080 that is reachable from the local network and serves files from Android external storage.
If you use Brain Trust
Update Gallery - Private Photo Vault to a version later than 1.0.41
Close the app or stop its server when it is not in use
Avoid using the app on shared or public Wi-Fi networks until patched
What the sources say 1
· Mastodon: “Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network.” Source