PT-2026-29992 · Propertyguru · Propertyguru Agentnet Singapore App

Fxizenta · Published 2026-04-03 · Updated 2026-04-03 · CVE-2026-5457

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PropertyGuru AgentNet Singapore App versions through 23.7.10

Description A security flaw exists in PropertyGuru AgentNet Singapore App on Android up to version 23.7.10. The issue involves the manipulation of the arguments SEGMENT ANDROID WRITE KEY and SEGMENT TOS WRITE KEY within an unknown function of the file com/allproperty/android/agentnet/BuildConfig.java of the component com.allproperty.android.agentnet, leading to the use of a hard-coded cryptographic key. The attack requires local access. The exploit has been publicly released.

Recommendations Update PropertyGuru AgentNet Singapore App to a version later than 23.7.10.

Exploit

Fix

Weakness Enumeration

CWE-320

CWE-321

Related Identifiers

CVE-2026-5457

Affected Products

Propertyguru Agentnet Singapore App

References · 6

• 🔥 https://notion.so/Segment-Write-Key-Exposure-Leading-to-Data-Injection-and-User-Profile-Manipulation-In-com-allpropert-3262de3f97fb80b5aa5ae52475bf155e?source=copy_link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5457 · Security Note
• https://vuldb.com/submit/781764 · Note
• https://vuldb.com/vuln/355045 · Note
• https://vuldb.com/vuln/355045/cti · Note
• https://twitter.com/CVEnew/status/2040128720531313067 · Twitter Post