PT-2025-45152 · Cd Projekt · Gog Galaxy

Published 2025-11-05 · Updated 2026-01-09 · CVE-2025-56232

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions GOG Galaxy version 2.0.0.2

Description GOG Galaxy version 2.0.0.2 is susceptible to a missing SSL certificate validation issue. An attacker with control over the local network, DNS, or a proxy can conduct a man-in-the-middle (MitM) attack. This allows the attacker to intercept update requests and substitute legitimate installer or update packages with malicious files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-599

Related Identifiers

CVE-2025-56232

Affected Products

Gog Galaxy

References · 6

• 🔥 https://notion.so/CVE-2025-56232-2a04e9f2a40d80dab203e39b5c9462f6 · Exploit
• 🔥 https://youtu.be/WchHCmqGaFQ · Exploit
• https://osv.dev/vulnerability/CVE-2025-56232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56232 · Security Note
• https://t.me/cveNotify/148263 · Telegram Post
• https://t.me/CVEtracker/36642 · Telegram Post