A flaw in Genspark AI Workspace App version 2.8.4 on Android permits an attacker to influence the handling of a custom URL scheme without proper authorization checks. The vulnerability is classified under improper authorization and authentication weaknesses. While the attack surface is limited to a local environment, successful exploitation could allow local users to invoke privileged actions through the custom URL scheme, potentially exposing sensitive data or manipulating the application state.

Affected are users running Genspark AI Workspace App 2.8.4 on Android devices. The issue is tied to the ai.mainfunc.genspark component responsible for processing custom URL schemes. No other products or versions are listed as affected.

The CVSS score of 4.8 indicates a moderate severity, and the EPSS score is currently unavailable, implying the likelihood of exploitation is unclear. The vulnerability is not listed in CISA KEV, suggesting it has not been observed in the wild as of the data set. The attack can be performed only from a local environment, meaning an attacker needs physical or local network access to the target device. No mitigations or patches are referenced in the vendor’s public advisories, so the risk remains until a fix is released or mitigated.