CVE-2025-11598
Low
Description
In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal information in the minimized app window, even after the login session has ended (reopening the app would require the user to log in). The data exposed depends on the last application view displayed before the application was minimized This issue was fixed in version 4.71.0
SeverityLow
CVSS1.0
Exploit probability—
ProductmObywatel
PublishedFeb 3, 2026
First seenFeb 3, 2026
Weakness typeCWE-359CWE-359
How to fix
Update
- Centralny Ośrodek Informatyki mObywatel4.71.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Centralny Ośrodek Informatyki mObywatel | v < 4.71.0 | 4.71.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.