Account Takeover / Arbitrary File read and deletion / Partial code execution (intent redirection)

Summary

We thank @fr4via for the report and for providing clear reproduction steps with a proof-of-concept code demonstrating the vulnerability. MercadoLibre acknowledged the issue and worked on a fix internally.