CVE-2026-118767

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-118767", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-28T19:20:05.017Z", "datePublished": "2026-10-29T17:17:24.323Z", "dateUpdated": "2026-10-30T17:12:36.136Z"}, "containers": {"cna": {"title": "Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs", "problemTypes": [{"descriptions": [{"cweId": "CWE-158", "lang": "en", "description": "CWE-158: Improper Neutralization of Null Byte or NUL Character", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/randombit/botan/security/advisories/GHSA-w8gj-5xrm-gvrp", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/randombit/botan/security/advisories/GHSA-w8gj-5xrm-gvrp"}, {"name": "https://github.com/randombit/botan/pull/5814", "tags": ["x_refsource_MISC"], "url": "https://github.com/randombit/botan/pull/5814"}, {"name": "https://github.com/randombit/botan/commit/5a4ac737e72e18a08eca848049e3dd38571c73b4", "tags": ["x_refsource_MISC"], "url": "https://github.com/randombit/botan/commit/5a4ac737e72e18a08eca848049e3dd38571c73b4"}], "affected": [{"vendor": "randombit", "product": "botan", "versions": [{"version": ">= 1.11.22, < 3.13.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-29T17:17:24.323Z"}, "descriptions": [{"lang": "en", "value": "Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char* values without consistently rejecting the embedded NUL, causing bcrypt and check_bcrypt to process only the prefix before the NUL. Applications could validate a longer password but hash a shorter effective value, allowing application password-policy bypass; scrypt and argon2 are unaffected. This issue is fixed in version 3.13.0."}], "source": {"advisory": "GHSA-w8gj-5xrm-gvrp", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-30T15:20:33.590831Z", "id": "CVE-2026-118767", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T17:12:36.136Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-118767", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-30T15:20:33.590831Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T15:20:34.415Z"}}], "cna": {"title": "Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs", "source": {"advisory": "GHSA-w8gj-5xrm-gvrp", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "randombit", "product": "botan", "versions": [{"status": "affected", "version": ">= 1.11.22, < 3.13.0"}]}], "references": [{"url": "https://github.com/randombit/botan/security/advisories/GHSA-w8gj-5xrm-gvrp", "name": "https://github.com/randombit/botan/security/advisories/GHSA-w8gj-5xrm-gvrp", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/randombit/botan/pull/5814", "name": "https://github.com/randombit/botan/pull/5814", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/randombit/botan/commit/5a4ac737e72e18a08eca848049e3dd38571c73b4", "name": "https://github.com/randombit/botan/commit/5a4ac737e72e18a08eca848049e3dd38571c73b4", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char* values without consistently rejecting the embedded NUL, causing bcrypt and check_bcrypt to process only the prefix before the NUL. Applications could validate a longer password but hash a shorter effective value, allowing application password-policy bypass; scrypt and argon2 are unaffected. This issue is fixed in version 3.13.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-158", "description": "CWE-158: Improper Neutralization of Null Byte or NUL Character"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-29T17:17:24.323Z"}}}, "cveMetadata": {"cveId": "CVE-2026-118767", "state": "PUBLISHED", "dateUpdated": "2026-10-30T17:12:36.136Z", "dateReserved": "2026-10-28T19:20:05.017Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-10-29T17:17:24.323Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "botan", "vendor": "randombit", "versions": [{"status": "affected", "version": ">= 1.11.22, < 3.13.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char* values without consistently rejecting the embedded NUL, causing bcrypt and check_bcrypt to process only the prefix before the NUL. Applications could validate a longer password but hash a shorter effective value, allowing application password-policy bypass; scrypt and argon2 are unaffected. This issue is fixed in version 3.13.0."}], "id": "CVE-2026-118767", "lastModified": "2026-10-30T19:37:07.073", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 2.5, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-118767", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-30T15:20:33.590831Z", "version": "2.0.3"}}]}, "published": "2026-10-29T18:17:28.853", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/randombit/botan/commit/5a4ac737e72e18a08eca848049e3dd38571c73b4"}, {"source": "security-advisories@github.com", "url": "https://github.com/randombit/botan/pull/5814"}, {"source": "security-advisories@github.com", "url": "https://github.com/randombit/botan/security/advisories/GHSA-w8gj-5xrm-gvrp"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-158"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "botan: botan: Password policy bypass via embedded null byte in Python bindings", "id": "2563606", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563606"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "status": "draft"}, "cwe": "CWE-140", "details": ["Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan's Python binding converted Python strings containing U+0000 to const char* values without consistently rejecting the embedded NUL, causing bcrypt and check_bcrypt to process only the prefix before the NUL. Applications could validate a longer password but hash a shorter effective value, allowing application password-policy bypass; scrypt and argon2 are unaffected. This issue is fixed in version 3.13.0.", "A flaw was found in Botan. Its Python bindings fail to properly reject embedded null characters when converting strings, causing bcrypt password hashing functions to truncate the input at the null byte. A remote attacker can exploit this flaw to bypass password length and complexity policies, as an application may validate a full password string while only the prefix before the null byte is hashed and checked."], "name": "CVE-2026-118767", "public_date": "2026-10-29T17:17:24Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-118767\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-118767\nhttps://github.com/randombit/botan/commit/5a4ac737e72e18a08eca848049e3dd38571c73b4\nhttps://github.com/randombit/botan/pull/5814\nhttps://github.com/randombit/botan/security/advisories/GHSA-w8gj-5xrm-gvrp"], "statement": "This vulnerability is rated as Moderate impact because exploitation requires custom software to utilize Botan's Python interface specifically for bcrypt hashing while accepting unvalidated null characters from user input. Under typical Red Hat deployments, Botan is not part of core Enterprise Linux installations and is primarily consumed via supplemental community repositories such as EPEL. The security impact is constrained to the circumvention of password complexity or length enforcement rather than arbitrary code execution or credential disclosure. Furthermore, alternative password derivation mechanisms provided by the library, including Argon2 and scrypt, remain completely unaffected.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.11.22,3.13.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "botan", "source": "cna", "vendor": "randombit"}, "product": "botan", "vendor": "randombit"}], "created": "2026-10-29T18:30:14.422907+00:00", "updated": "2026-11-04T14:15:15.827695+00:00", "vendors": ["randombit", "randombit$PRODUCT$botan"]}