CVE-2026-5457 | PropertyGuru AgentNet Singapore App up to 23.7.10 on Android com.allproperty.android.agentnet BuildConfig.java SEGMENT_ANDROID_WRITE_KEY/SEGMENT_TOS_WRITE_KEY hard-coded key

A vulnerability was found in PropertyGuru AgentNet Singapore App up to 23.7.10 on Android and classified as problematic. This affects an unknown function of the file com/allproperty/android/agentnet/BuildConfig.java of the component com.allproperty.android.agentnet. The manipulation of the argument SEGMENT_ANDROID_WRITE_KEY/SEGMENT_TOS_WRITE_KEY results in use of hard-coded cryptographic key
.

This vulnerability is cataloged as CVE-2026-5457. The attack must be initiated from a local position. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.