A vulnerability was found in CityData CityChat up to 0.12.6 on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the file resources/assets/flutter_assets/assets/credentials.json of the component ai.citydata.citychat. Executing a manipulation can lead to unprotected storage of credentials.
This vulnerability appears as CVE-2026-4251. The attack requires local access. In addition, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
