Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 66

Export CSV
CVE-2026-81696

openssl_encrypt before 1.4.9 Terminal Injection via info Command

openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81695

openssl_encrypt before 1.4.9 Terminal Injection via key_id

openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious key_id containing escape sequences to repaint terminal output and forge authenticity verification blocks.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81693

openssl_encrypt before 1.4.9 Denial of Service via QR total field

openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81692

openssl_encrypt before 1.4.9 Denial of Service via STREAMINFO

openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples field of FLAC files before using it to size an allocation (np.random.randint(size=(total_samples, channels))). A ~50-byte crafted FLAC file declaring ~100 million samples causes a multi-gigabyte memory allocation, leading to out-of-memory denial of service during 'decrypt --stego-extract'. The issue is fixed in 1.4.9; both the 1.4.x and 1.5.x lines are affected.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81691

openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs

openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including client_id, passwords, and JWTs to achieve full keyserver account takeover.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81690

verify-usb before 1.4.9 Symlink Directory Traversal Code Execution

openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob(), which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while O_NOFOLLOW on the hash side binds only the final path component. An evil-maid attacker with physical access to the removable drive could replace a tool-tree directory with a symlink to a copy containing byte-identical files plus a planted __pycache__/*.pyc file (which CPython loads in preference to recompiling the clean .py). The planted file is never enumerated, added_files stays 0, and verify-usb reports PASSED, resulting in code execution when the victim runs the portable install. Fixed in 1.4.9 (affects both 1.4.x and 1.5.x lines).

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81689

openssl_encrypt before 1.4.9 Weak Pepper Key Derivation

openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide offline password guessing at hardware speed to recover user passwords.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81688

openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256

openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to confirm guessed plaintexts offline or fingerprint identical plaintexts across separately-encrypted files.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81687

openssl_encrypt before 1.4.9 Denial of Service via KDF

openssl_encrypt versions before 1.4.9 fail to enforce a time ceiling on key derivation function iteration counts specified in file metadata. Attackers can craft files with extremely high KDF iteration counts to consume CPU resources for unbounded periods before password verification occurs.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81686

openssl_encrypt before 1.4.9 D-Bus Properties Authorization Bypass

openssl_encrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations (to 0/negative, causing the concurrency gate to refuse all subsequent operations, or to a huge value removing the limit) or the unbounded DefaultTimeout, resulting in a persistent denial of service of the root daemon. The D-Bus service exists only on the 1.4.x line and was removed in 1.5.x.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81685

openssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadata

openssl_encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing attackers to inject control characters and line separators into the irreversible-removal confirmation dialog. Attackers can craft encrypted files with malicious slot identifiers containing bidi overrides or line-separator characters to forge warning text and deceive users during file removal operations.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81684

openssl_encrypt before 1.4.9 Information Disclosure via Command Line

In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument (on both encrypt and decrypt paths) instead of via an environment variable as done for the main password. Any local user can read the steganography password from /proc/<pid>/cmdline for the lifetime of the subprocess. Fixed in 1.4.9.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81683

openssl_encrypt before 1.4.9 Plaintext Private Key Storage

openssl_encrypt (pip package openssl-encrypt) versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable (0644) SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access can read the exposed private key. Version 1.4.9 writes the PEM to a dedicated 0600 file, keeps only its path in SharedPreferences, and migrates/scrubs existing cleartext values.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81682

openssl_encrypt before 1.4.9 Insecure File Permissions

openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissions. Attackers can read decrypted output files created by the GUI as unprivileged local users on multi-user systems.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81681

openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage

openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the workspace encrypted, but the workspace directory is actually stored in cleartext and the derived encryption key is never applied to it. A user who trusts the branding and places files in the workspace leaves them unencrypted on the removable media, so an attacker with physical access to the media can read the sensitive files. Fixed in 1.4.9, which seals the workspace into an authenticated AES-256-GCM vault.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-81680

openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal

openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silently removing recovery paths the owner deliberately added.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-74901

openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback

openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without detection.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-74900

openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode

openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain 16 bytes of the private key can compute the shared secret and decrypt all ciphertext, as the fallback triggers on any KEM failure without raising an error.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-74899

openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy

openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Python class hierarchy via __class__.__mro__.__subclasses__() to access system functions and execute arbitrary OS commands.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt
CVE-2026-74896

openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal

openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. Attackers can use __class__, __bases__, __subclasses__(), and __globals__ chains to access restricted functions and execute arbitrary system commands from plugin code.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jahlives
Products
Openssl Encrypt