CVE-2026-12190: Genspark AI Auth Bypass Vulnerability

CVE-2026-12190 Overview

CVE-2026-12190 is an improper authorization vulnerability in the Genspark AI Workspace App version 2.8.4 for Android. The flaw resides in the ai.mainfunc.genspark component, specifically within the handler for a custom URL scheme. A locally installed malicious application can invoke the exposed handler to trigger actions without proper authorization checks. The vendor was contacted prior to disclosure but did not respond. The issue is tracked under CWE-285: Improper Authorization.

Critical Impact
A co-resident malicious Android app can abuse the custom URL scheme handler in Genspark AI Workspace to perform actions without authorization, impacting confidentiality, integrity, and availability of in-app data.

Affected Products

Genspark AI Workspace App 2.8.4 on Android
Android package ai.mainfunc.genspark
Earlier versions are not confirmed but may share the same handler implementation

Discovery Timeline

2026-06-14 - CVE-2026-12190 published to NVD
2026-06-17 - Last updated in NVD database

Technical Details for CVE-2026-12190

Vulnerability Analysis

The vulnerability stems from how the Genspark AI Workspace Android app registers and processes a custom URL scheme. Android apps can declare intent filters that respond to custom schemes, making the handler reachable by any other application installed on the same device. The Genspark handler accepts incoming URIs and performs privileged in-app actions without validating the caller or the parameters supplied.

Because the handler is exported and lacks authorization enforcement, an attacker-controlled app on the device can craft a URI that invokes sensitive functions inside ai.mainfunc.genspark. The attack requires local access, which on Android translates to a second app running on the same device with at minimum the ability to send intents. No user interaction is required to deliver the malicious URI.

The weakness maps to CWE-285: Improper Authorization. Public technical details are tracked in the GitHub repository for ai.mainfunc.genspark and the VulDB CVE-2026-12190 entry.

Root Cause

The handler for the custom URL scheme does not verify that the caller is authorized to invoke the requested action. Android's intent system delivers the URI to the exported component, and the app processes it as if it originated from a trusted source. Missing caller verification, missing permission checks, and missing input validation combine to produce the authorization bypass.

Attack Vector

Exploitation is local. A malicious application installed on the same Android device sends an intent with the Genspark custom scheme URI. The Genspark app receives the intent through its registered handler and executes the corresponding action. No network access or elevated privileges are required from the attacker app beyond installation on the device.

No verified public proof-of-concept code is available. For technical context, refer to the GitHub repository tracking the issue.

Detection Methods for CVE-2026-12190

Indicators of Compromise

Presence of ai.mainfunc.genspark version 2.8.4 on Android endpoints managed through MDM or mobile threat defense inventory
Unexpected intents targeting the Genspark custom URL scheme originating from third-party apps in Android system logs
Installation of unknown or sideloaded applications co-resident with the Genspark AI Workspace app

Detection Strategies

Inspect the AndroidManifest.xml of installed builds for exported components and custom scheme intent filters under ai.mainfunc.genspark
Use mobile threat defense tooling to flag apps that declare intents targeting the vulnerable scheme on managed devices
Review device logs through logcat or enterprise mobility management telemetry for repeated invocations of the Genspark handler from non-user contexts

Monitoring Recommendations

Track Genspark AI Workspace app versions across the fleet and alert on installs of version 2.8.4
Monitor newly installed Android applications on devices that also have Genspark installed, particularly sideloaded packages
Forward Android security logs to a centralized analytics platform for correlation of intent activity with the vulnerable package

How to Mitigate CVE-2026-12190

Immediate Actions Required

Remove or disable Genspark AI Workspace App version 2.8.4 on managed Android devices until the vendor publishes a fix
Restrict installation of untrusted third-party Android applications on devices that have Genspark installed
Educate users about the risks of installing apps from outside official stores while Genspark is in use

Patch Information

At the time of publication no vendor patch is available. The vendor did not respond to disclosure attempts according to the VulDB CVE-2026-12190 entry. Monitor the Google Play listing for ai.mainfunc.genspark for an updated release that addresses the custom URL scheme handler.

Workarounds

Uninstall the Genspark AI Workspace app on affected Android devices where the workspace functionality is non-essential
Enforce mobile device management policies that block installation of unverified APKs on devices retaining the Genspark app
Use Android work profiles to isolate Genspark from personal applications, reducing the set of co-resident apps that can invoke the handler

bash

# Example: list installed Genspark package version via adb for inventory
adb shell pm list packages | grep ai.mainfunc.genspark
adb shell dumpsys package ai.mainfunc.genspark | grep versionName