CVE-2026-22070

ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.

high 7.1 CVSS 3.1

Published: Apr 30, 2026

Modified: Apr 30, 2026

Description