CVE-2026-92172: Improper Restriction of Communication Channel to Intended Endpoints (CWE-923) in Meta Platforms, Inc Meta Horizon OS
CVE-2026-92172 is a vulnerability in Meta Horizon OS prior to version 66.0.0.733.524. It involves improper restriction of communication channels, allowing an application to receive a privileged PendingIntent with a CallerIdentity from the OVRMediaService. This flaw enables the application to impersonate the com.oculus.horizon package to any endpoint within the OS that relies on CallerIdentity authentication.
AI Analysis
Technical Summary
Before version 66.0.0.733.524 of Meta Horizon OS, the OVRMediaService could be tricked into sending a privileged PendingIntent containing a com.oculus.horizon CallerIdentity to any application that registers for the com.oculus.systemactivities.SCREENSHOT broadcast receiver. This vulnerability (CWE-923) allows the receiving application to impersonate the com.oculus.horizon package when interacting with OS endpoints that authenticate using CallerIdentity, potentially bypassing intended communication restrictions.
Potential Impact
An attacker-controlled application could impersonate the trusted com.oculus.horizon package within the OS, potentially gaining unauthorized access or privileges in interactions with system components that rely on CallerIdentity authentication. This could lead to unauthorized actions or information disclosure within the Meta Horizon OS environment.
Mitigation Recommendations
A fix is available in Meta Horizon OS version 66.0.0.733.524 and later. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation guidance is provided.
CVE-2026-92172: Improper Restriction of Communication Channel to Intended Endpoints (CWE-923) in Meta Platforms, Inc Meta Horizon OS
Description
CVE-2026-92172 is a vulnerability in Meta Horizon OS prior to version 66.0.0.733.524. It involves improper restriction of communication channels, allowing an application to receive a privileged PendingIntent with a CallerIdentity from the OVRMediaService. This flaw enables the application to impersonate the com.oculus.horizon package to any endpoint within the OS that relies on CallerIdentity authentication.
Affected software
Meta Platforms, Inc
Meta Horizon OS
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Before version 66.0.0.733.524 of Meta Horizon OS, the OVRMediaService could be tricked into sending a privileged PendingIntent containing a com.oculus.horizon CallerIdentity to any application that registers for the com.oculus.systemactivities.SCREENSHOT broadcast receiver. This vulnerability (CWE-923) allows the receiving application to impersonate the com.oculus.horizon package when interacting with OS endpoints that authenticate using CallerIdentity, potentially bypassing intended communication restrictions.
Potential Impact
An attacker-controlled application could impersonate the trusted com.oculus.horizon package within the OS, potentially gaining unauthorized access or privileges in interactions with system components that rely on CallerIdentity authentication. This could lead to unauthorized actions or information disclosure within the Meta Horizon OS environment.
Mitigation Recommendations
A fix is available in Meta Horizon OS version 66.0.0.733.524 and later. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation guidance is provided.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Meta
- Date Reserved
- 2026-09-15T17:32:03.673Z
- State
- PUBLISHED
Threat ID: 6abd75ab2a4e24523d9323d8
Added to database: 09/30/2026, 20:48:43 UTC
Last enriched: 09/30/2026, 21:03:36 UTC
Last updated: 09/30/2026, 21:08:10 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.