CVE-2026-120422 Details

A vulnerability has been identified in the Sogou Input Method for Windows, specifically within the SGTool.exe component. This issue arises from the application's practice of retrieving configuration data over unencrypted HTTP connections. An attacker capable of manipulating network traffic can exploit this vulnerability by intercepting these requests and injecting malicious configurations. When exploited, the SGTool.exe component can be instructed to download files controlled by the attacker to arbitrary locations, including directories used by legitimate application components. This behavior can lead to unauthorized code execution if the downloaded files are executed or loaded by the application.

Users are advised to update to Sogou Input Method version 16.10 or later, which addresses the vulnerability by migrating the affected HTTP requests to HTTPS and enabling certificate pinning.