CVE-2026-4250 | Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android Google Cloud Service Account Key service-account.json credentials storage

A vulnerability has been found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android and classified as problematic. Affected is an unknown function of the file resources/assets/service-account.json of the component Google Cloud Service Account Key Handler. Performing a manipulation results in unprotected storage of credentials.

This vulnerability is reported as CVE-2026-4250. The attack requires a local approach. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.