CVE-2026-3861 LY Corporation CVE debrief

Who should care

Users of LINE client for iOS versions prior to 26.3.0 should update to the latest version to mitigate this HIGH severity vulnerability. Affected operators, platforms, vulnerability-management, and security teams should review and restrict in-app browser access to sensitive resources. Monitoring for suspicious activity and OS-level dialogs is recommended.

Technical summary

The LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser. Opening a crafted web page can repeatedly trigger OS-level dialogs due to insufficient safeguards when handling arbitrary URL schemes. This could potentially cause the iOS device to become temporarily inoperable. Users of LINE client for iOS should update to version 26.3.0 or later to mitigate this HIGH severity vulnerability.

Defensive priority

High priority should be given to updating LINE client for iOS to version 26.3.0 or later and reviewing compensating controls for exposed systems.

Recommended defensive actions

• Update LINE client for iOS to version 26.3.0 or later
• Review and restrict in-app browser access to sensitive resources
• Monitor for suspicious activity and OS-level dialogs
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD detail provide information on the vulnerability, but further analysis is needed to fully understand the impact. Affected product deployments should be confirmed to exist in managed environments and assigned an owner for follow-up. The in-app browser vulnerability could potentially cause iOS devices to become temporarily inoperable if exploited. Evidence limits suggest verifying OS-level dialogs and URL scheme handling.

Official resources