Skip to content
CodeAuditAgent

CVE-2026-22070

ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.

Weakness

ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.

Affected products

  • oppo coloros_assistant

References

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.