The vulnerability stems from improperly configured permissions on an exported component in the MBasov OMN-Go Android application, allowing unauthorized parties to invoke that component. This enables attackers to gain arbitrary access to the application's data and to influence the internal data flow, potentially exposing sensitive information and manipulating app behavior.

The flaw is found in the OMN-Go application (internal versionCode 26080824). No vendor name is listed beyond the developer. The vulnerability is tied to that particular release; newer releases have not been documented.

No EPSS score or KEV listing is available, and a CVSS score is not provided, but the nature of the flaw indicates high impact. Attackers would likely exploit a local context by invoking the exported component from another application or by using a crafted intent. Because the component is exported without sufficient protection, the attack is largely local but can compromise data integrity if the device is shared or if a malicious app is present. The lack of an official fix underscores the need for timely remediation.