The vulnerability in question is CVE-2025-51591 (CVSS score: 6.5), which refers to a case of Server-Side Request Forgery ...
You can now access most of your Android phone's files from the Linux Terminal app, starting in Android 16 QPR2.