CVE Catalog
CVE-2026-20976
HighSummary
Galaxy Store prior to version 4.6.02 has improper input validation, allowing a local attacker to execute arbitrary script.
Risk Assessment
A local attacker can execute malicious script in the context of the application, potentially leading to data compromise.
Recommendation
Update Galaxy Store to the latest version that includes the fix.
Other vulnerabilities in Galaxy Store
Original NVD description (English source)
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS