LawnchairLauncher CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH LawnchairLauncher CVE published 2026-04-21

CVE-2026-39866

CVE-2026-39866 is a high-severity vulnerability in the Lawnchair Android home app, allowing for arbitrary code execution via command injection in the release_update.yml workflow dispatch input. A patch is available in commit fcba413f55dd47f8a3921445252849126c6266b2. This issue affects users of the Lawnchair app, particularly those who have not updated to the patched version. The vulnerability has a CVSS s [truncated]