CVE-2025-20895

Summary

CVE-2025-20895 is a vulnerability affecting the Galaxy Store prior to version 4.5.87.6. This issue permits physical attackers to bypass authentication and install unauthorized applications, disregarding setup wizard restrictions. An attacker can exploit this authentication bypass through an alternate path, enabling them to circumvent the Galaxy Store's security measures and introduce malicious software. This vulnerability poses a significant risk to users, allowing potential attackers to gain unauthorized access and compromise devices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.