CVE-2026-5471

Name of the Vulnerable Software and Affected Versions Investory Toy Planet Trouble App versions up to 1.5.5

Description A security issue exists in Investory Toy Planet Trouble App on Android. The issue involves the manipulation of the current key argument, leading to the use of a hard-coded cryptographic key within the file assets/google-services-desktop.json of the component app.investory.toyfactory. The attack requires local access. The exploit is publicly available.

Recommendations Update Investory Toy Planet Trouble App to a version newer than 1.5.5.