CVE-2026-20969

Medium · 5.5

CVSS

5.5

EPSS

0.3%

Published

Jan 9, 2026

CISA due date

—

The record

Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction is required for triggering this vulnerability.

Affected packages

Ecosystem	Package	Introduced	Fixed