GitHub’s AI agent found 24 Android app vulnerabilities

GitHub Security Lab researcher Kevin Stubbings used custom AI-driven audit workflows, called taskflows, built on the lab's open source Taskflow Agent to find and report 24 vulnerabilities in Android apps. Two of the disclosed bugs include an exported activity named MapActivity in OsmAnd, a navigation app with over 10 million Play Store downloads, that accepted intent extras which should have remained restricted to internal use.

GitHub Security Lab researcher Kevin Stubbings built custom AI-driven audit workflows, called taskflows, on top of the lab’s open source Taskflow Agent, and used them to find and report more than 20 vulnerabilities in Android apps. Two of the disclosed bugs show what’s at stake. In OsmAnd, a navigation app with over 10 million downloads on the Play Store, an exported activity called MapActivity accepted intent extras that should have stayed restricted to an internal … More https://www.helpnetsecurity.com/2026/09/29/github-ai-android-app-vulnerabilities/ The post GitHub’s AI agent found 24 Android app vulnerabilities https://www.helpnetsecurity.com/2026/09/29/github-ai-android-app-vulnerabilities/ appeared first on Help Net Security https://www.helpnetsecurity.com .