CVE-2026-11319 | TickTick Limited 8.2.2.0 ShareReceiveActivity _display_name path traversal

October 19, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in TickTick Limited TickTick 8.2.2.0. Impacted is the function FileManager.getDisplayNameFromUri/AttachmentFileHelper.copyFileDirectly of the component ShareReceiveActivity. Performing a manipulation of the argument _display_name results in path traversal.

This vulnerability was named CVE-2026-11319. The attack needs to be approached locally. There is no available exploit.VulDB Recent EntriesRead More