CVE-2026-5454
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A vulnerability was found in GRID Organiser App up to 1.0.5 on Android in the file res/raw/app.json. Manipulation of the SegmentWriteKey argument results in use of a hard-coded cryptographic key. The attack requires local access.
Risk Assessment
Use of a hard-coded cryptographic key could allow an attacker with local access to decrypt sensitive data or impersonate the application.
Recommendation
Update the GRID Organiser App to the latest version that fixes this vulnerability. Restrict local access to the device.
Original NVD description (English source)
A vulnerability was found in GRID Organiser App up to 1.0.5 on Android. Impacted is an unknown function of the file file res/raw/app.json of the component co.gridapp.organiser. Performing a manipulation of the argument SegmentWriteKey results in use of hard-coded cryptographic key . The attack is only possible with local access. The exploit has been made public and could be used.