Read the docs
TI-2018-03019 Aliases CVE-2018-4051GHSA-hhmf-h6c6-m327

Incorrect permission assignment in GOG.COM GOG Galaxy

Priority LOW 25CWE-732Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories.

Why it matters now

EPSS 0.00278 20th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
GOG.COMGOG GalaxyGog Galaxy 1.2.47 (macOS)—No fix listedCNA
  • GOG Galaxy VendorGOG.COM Affected Gog Galaxy 1.2.47 (macOS) Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:gog:galaxy:1.2.47:*:*:*:*:macos:*:*1.2.47VulnerableGOG.COM
  • cpe:2.3:a:gog:galaxy:1.2.47:*:*:*:*:macos:*:* Versions 1.2.47 Vulnerable ·GOG.COM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-4051
  2. 2026-10-03 Alias added: GHSA-hhmf-h6c6-m327

References

Advisory 1

  • TI-2020-05946 GOG Galaxy GalaxyClientService Privilege Escalation CVSS 3.1HIGH 8.8
  • TI-2020-12225 An issue was discovered in GOG Galaxy Client 2.0.17. CVSS 3.1HIGH 7.8
  • TI-2020-12226 An issue was discovered in GOG Galaxy Client 2.0.17. CVSS 3.1HIGH 7.8
  • TI-2022-13295 An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. CVSS 3.1HIGH 7.8
  • TI-2021-08442 GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll… CVSS 3.1HIGH 7.8
  • TI-2020-15055 The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM… CVSS 3.1HIGH 7.8
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences