An incorrect access control check in the handling of intent:// URLs within AgentWeb Core’s DefaultWebClient allows a local attacker to read sensitive data and to invoke non‑exported host application components. The vulnerability is limited to devices where the attacker has local access, as it relies on manipulating intent URIs that are interpreted by the host.

Justson AgentWeb Core v5.1.6‑androidx and any earlier releases. The issue exists in the DefaultWebClient class that processes intent:// schemes.

The CVSS score of 5.5 places the flaw in the moderate severity range. An EPSS value of less than 1 % indicates that exploitation is unlikely, yet the vulnerability is not tracked in CISA’s KEV catalog. A local attacker could potentially craft a malicious intent URI to retrieve protected data or trigger hidden components, so the risk is contingent on the presence and exposure of non‑exported components within the host application.