CVE-2026-21075

Improper authorization in the handler for the custom URL scheme in My Galaxy prior to version 6.3 enables remote attackers to access sensitive information. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized data exposure. This vulnerability is particularly relevant for developers and security teams managing applications that utilize the My Galaxy platform.