A vulnerability, which was classified as problematic, has been found in GRID Organiser App up to 1.0.5 on Android. Impacted is an unknown function of the file file res/raw/app.json of the component co.gridapp.organiser. Performing a manipulation of the argument SegmentWriteKey results in use of hard-coded cryptographic key
.

This vulnerability is identified as CVE-2026-5454. The attack is only possible with local access. Additionally, an exploit exists.