6.2
Medium
CVE-2022-28544 Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5…
Description
Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Galaxy Store 4.5 | earliest → < 4.5.40.5 | 4.5.40.5 |
Other CVEs of Galaxy Store
The 29 CVEs of Galaxy Store →
CVE-2026-21002
Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to…
5.9
Medium
CVE-2026-21001
Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store…
5.9
Medium
CVE-2026-21000
Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store…
7.0
High
CVE-2026-20976
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script
5.1
Medium