Skip to content
Sign in
6.2 Medium

CVE-2022-28791 Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to…

Description

Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored in a specific path. The patch adds proper protection to prevent overwrite to existing files.

Affected products and versions

Product Affected versions Fixed in
Galaxy Store 4.5 earliest → < 4.5.41.3 4.5.41.3

Other CVEs of Galaxy Store

The 29 CVEs of Galaxy Store →
CVE-2026-21002 Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to… 5.9 Medium CVE-2026-21001 Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store… 5.9 Medium CVE-2026-21000 Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store… 7.0 High CVE-2026-20976 Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script 5.1 Medium
Track this CVE