What is CVE-2026-5455?

CVE-2026-5455 is a low-severity vulnerability in Dialogue App, classified under Use of Hard-coded Cryptographic Key. CVSS score: 3.3/10. Published 2026-04-03.

How severe is CVE-2026-5455?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Dialogue App

CVE-2026-5455

A vulnerability was determined in Dialogue App up to 4.3.2 on Android. The affected element is an unknown function of the file file res/raw/config.json of the component ca.diagram.dialogue. Executing a manipulation of the argument SEGMENT_…

EPSS: 0.000 (1.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R.

Affected products

N/a Dialogue App — versions 4.3.0, 4.3.1, 4.3.2

Weakness classification (CWE)

References

VDB-355043 | Dialogue App ca.diagram.dialogue config.json hard-coded key (vdb-entry, technical-description)
VDB-355043 | CTI Indicators (IOB, IOC, TTP, IOA) (signature, permissions-required)
Submit #781761 | Dialogue Dialogue(ca.diagram.dialogue) 4.3.2 Segment Write Key Exposure (third-party-advisory)
www.notion.so/Segment-Write-Key-Exposure-Leading-to-Data-Injection-and-User-Pro… (exploit)

Frequently asked questions

What is CVE-2026-5455?: CVE-2026-5455 is a low-severity vulnerability in Dialogue App, classified under Use of Hard-coded Cryptographic Key. CVSS score: 3.3/10. Published 2026-04-03.
How severe is CVE-2026-5455?: Low severity. CVSS v3 base score is 3.3 out of 10.