CVE-2026-41564

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-41564", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "state": "PUBLISHED", "assignerShortName": "CPANSec", "dateReserved": "2026-04-21T12:45:20.132Z", "datePublished": "2026-04-23T07:29:26.340Z", "dateUpdated": "2026-04-23T13:05:22.853Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "CryptX", "product": "CryptX", "programFiles": ["inc/CryptX_PK_RSA.xs.inc", "inc/CryptX_PK_DSA.xs.inc", "inc/CryptX_PK_DH.xs.inc", "inc/CryptX_PK_ECC.xs.inc", "inc/CryptX_PK_Ed25519.xs.inc", "inc/CryptX_PK_X25519.xs.inc"], "repo": "https://github.com/DCIT/perl-CryptX", "vendor": "MIK", "versions": [{"lessThan": "0.088", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking.\n\nThe Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A Crypt::PK::* object created before `fork()` shares byte-identical PRNG state with every child process, and any randomized operation they perform can produce identical output, including key generation. Two ECDSA or DSA signatures from different processes are enough to recover the signing private key through nonce-reuse key recovery.\n\nThis affects preforking services such as the Starman web server, where a Crypt::PK::* object loaded at startup is inherited by every worker process."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-335", "description": "CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-338", "description": "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-04-23T07:29:26.340Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6"}, {"tags": ["patch"], "url": "https://github.com/DCIT/perl-CryptX/commit/9a1dd3e0c27d68e32450be5538b864c2b115ee15.patch"}, {"tags": ["release-notes"], "url": "https://metacpan.org/release/MIK/CryptX-0.088"}], "solutions": [{"lang": "en", "value": "Upgrade to CryptX 0.088 or later, or apply the upstream patch.\n\nApplying the fix does not retroactively protect keys that may already have been exposed. On an affected version, any private key used with or generated by a Crypt::PK::* object created before `fork()` should be assessed for rotation."}], "source": {"discovery": "UNKNOWN"}, "timeline": [{"lang": "en", "time": "2026-04-18T00:00:00.000Z", "value": "Issue discovered."}, {"lang": "en", "time": "2026-04-21T00:00:00.000Z", "value": "Reported to upstream maintainer."}, {"lang": "en", "time": "2026-04-23T00:00:00.000Z", "value": "CryptX 0.088 released with fix."}], "title": "CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking", "x_generator": {"engine": "cpansec-cna-tool 0.1"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/04/23/2"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-04-23T09:33:41.857Z"}}, {"references": [{"url": "https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6", "tags": ["exploit"]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-23T13:05:18.115917Z", "id": "CVE-2026-41564", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-23T13:05:22.853Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/04/23/2"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-04-23T09:33:41.857Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-41564", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-23T13:05:18.115917Z"}}}], "references": [{"url": "https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-23T13:04:00.515Z"}}], "cna": {"title": "CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking", "source": {"discovery": "UNKNOWN"}, "affected": [{"repo": "https://github.com/DCIT/perl-CryptX", "vendor": "MIK", "product": "CryptX", "versions": [{"status": "affected", "version": "0", "lessThan": "0.088", "versionType": "custom"}], "packageName": "CryptX", "programFiles": ["inc/CryptX_PK_RSA.xs.inc", "inc/CryptX_PK_DSA.xs.inc", "inc/CryptX_PK_DH.xs.inc", "inc/CryptX_PK_ECC.xs.inc", "inc/CryptX_PK_Ed25519.xs.inc", "inc/CryptX_PK_X25519.xs.inc"], "collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-04-18T00:00:00.000Z", "value": "Issue discovered."}, {"lang": "en", "time": "2026-04-21T00:00:00.000Z", "value": "Reported to upstream maintainer."}, {"lang": "en", "time": "2026-04-23T00:00:00.000Z", "value": "CryptX 0.088 released with fix."}], "solutions": [{"lang": "en", "value": "Upgrade to CryptX 0.088 or later, or apply the upstream patch.\n\nApplying the fix does not retroactively protect keys that may already have been exposed. On an affected version, any private key used with or generated by a Crypt::PK::* object created before `fork()` should be assessed for rotation."}], "references": [{"url": "https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6", "tags": ["vendor-advisory"]}, {"url": "https://github.com/DCIT/perl-CryptX/commit/9a1dd3e0c27d68e32450be5538b864c2b115ee15.patch", "tags": ["patch"]}, {"url": "https://metacpan.org/release/MIK/CryptX-0.088", "tags": ["release-notes"]}], "x_generator": {"engine": "cpansec-cna-tool 0.1"}, "descriptions": [{"lang": "en", "value": "CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking.\n\nThe Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A Crypt::PK::* object created before `fork()` shares byte-identical PRNG state with every child process, and any randomized operation they perform can produce identical output, including key generation. Two ECDSA or DSA signatures from different processes are enough to recover the signing private key through nonce-reuse key recovery.\n\nThis affects preforking services such as the Starman web server, where a Crypt::PK::* object loaded at startup is inherited by every worker process."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-335", "description": "CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-338", "description": "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-04-23T07:29:26.340Z"}}}, "cveMetadata": {"cveId": "CVE-2026-41564", "state": "PUBLISHED", "dateUpdated": "2026-04-23T13:05:22.853Z", "dateReserved": "2026-04-21T12:45:20.132Z", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "datePublished": "2026-04-23T07:29:26.340Z", "assignerShortName": "CPANSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "CryptX", "product": "CryptX", "programFiles": ["inc/CryptX_PK_RSA.xs.inc", "inc/CryptX_PK_DSA.xs.inc", "inc/CryptX_PK_DH.xs.inc", "inc/CryptX_PK_ECC.xs.inc", "inc/CryptX_PK_Ed25519.xs.inc", "inc/CryptX_PK_X25519.xs.inc"], "repo": "https://github.com/DCIT/perl-CryptX", "vendor": "MIK", "versions": [{"lessThan": "0.088", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:dcit:cryptx:*:*:*:*:*:perl:*:*", "matchCriteriaId": "867C8CA7-DE4B-4FA3-9463-54005255A432", "versionEndExcluding": "0.088", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking.\n\nThe Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A Crypt::PK::* object created before `fork()` shares byte-identical PRNG state with every child process, and any randomized operation they perform can produce identical output, including key generation. Two ECDSA or DSA signatures from different processes are enough to recover the signing private key through nonce-reuse key recovery.\n\nThis affects preforking services such as the Starman web server, where a Crypt::PK::* object loaded at startup is inherited by every worker process."}, {"lang": "es", "value": "Las versiones de CryptX anteriores a la 0.088 para Perl no reinicializan el estado del PRNG de Crypt::PK despu\u00e9s de la bifurcaci\u00f3n.\n\nLos m\u00f3dulos Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 y Crypt::PK::X25519 inicializan un estado de PRNG por objeto en sus constructores y lo reutilizan sin detecci\u00f3n de bifurcaci\u00f3n. Un objeto Crypt::PK::* creado antes de \u2019fork()\u2019 comparte un estado de PRNG id\u00e9ntico byte a byte con cada proceso hijo, y cualquier operaci\u00f3n aleatoria que realicen puede producir una salida id\u00e9ntica, incluida la generaci\u00f3n de claves. Dos firmas ECDSA o DSA de procesos diferentes son suficientes para recuperar la clave privada de firma mediante la recuperaci\u00f3n de claves por reutilizaci\u00f3n de \u2019nonce\u2019.\n\nEsto afecta a los servicios de pre-bifurcaci\u00f3n, como el servidor web Starman, donde un objeto Crypt::PK::* cargado al inicio es heredado por cada proceso trabajador."}], "id": "CVE-2026-41564", "lastModified": "2026-10-26T22:10:00.163", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-41564", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-23T13:05:18.115917Z", "version": "2.0.3"}}]}, "published": "2026-04-23T08:16:01.243", "references": [{"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Patch"], "url": "https://github.com/DCIT/perl-CryptX/commit/9a1dd3e0c27d68e32450be5538b864c2b115ee15.patch"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Vendor Advisory"], "url": "https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Product"], "url": "https://metacpan.org/release/MIK/CryptX-0.088"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2026/04/23/2"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Vendor Advisory"], "url": "https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6"}], "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-335"}, {"lang": "en", "value": "CWE-338"}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,0.088)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "CryptX", "source": "cna", "vendor": "MIK"}, "product": "cryptx", "vendor": "mik"}], "analysis": {"en": {"generated_at": "2026-04-28T14:57:11.567927+00:00", "value": {"mitigation_remediation": ["Upgrade CryptX to version 0.088 or later, or apply the upstream patch provided by the maintainer.", "Rotate any private key or key material that was created or used by a Crypt::PK::* object before forking; the fix does not protect keys that may already have been exposed.", "Modify preforking services so that Crypt::PK::* objects are instantiated after fork or reinitialize the PRNG state in each child process to prevent state sharing."], "summary": {"action": "Immediate Patch", "impact": "Predictable Randomness Leading to Key Compromise"}, "threat_synthesis": {"affected_systems": "The vulnerability impacts any Perl application that loads CryptX before version 0.088, specifically the Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519, and Crypt::PK::X25519 modules. Commonly affected environments include preforking web servers such as Starman that instantiate Crypt::PK::* objects at startup and inherit them in worker processes.", "description_and_impact": "CryptX versions prior to 0.088 for Perl do not reseed the state of the Crypt::PK pseudo\u2011random number generator after a process fork. The Crypt::PK::* classes seed a dedicated PRNG during construction and then reuse that state without detecting forking, meaning a Crypt::PK::* object created before fork shares an identical PRNG state with every child process. Operations that rely on this PRNG, such as key generation or signature creation, can thus produce identical outcomes across processes. This nonce\u2011reuse flaw enables an attacker who can obtain distinct ECDSA or DSA signatures from separate processes to recover the signing private key, resulting in full key compromise.", "risk_and_exploitability": "The CVSS score of 7.5 indicates a high severity, while the EPSS score of less than 1% suggests a low probability of exploitation. The vulnerability is not listed in CISA KEV, implying it has not been widely confirmed as actively exploited. An attacker would need the ability to trigger cryptographic operations in separate forked processes, which can be achieved through a preforking service that exposes signature or key\u2011generation functions, or by collecting executions from existing keys that were created before fork. Once two distinct signatures from different processes are available, key recovery is straightforward. The attack is considered local or requires out\u2011of\u2011band access unless the application publicly exposes the cryptographic functions. Because the flaw allows key material reuse across workers, the risk extends to all users of a preforking application that does not reseed the PRNG after fork."}}}}, "created": "2026-04-28T09:26:16.537686+00:00", "updated": "2026-04-28T15:00:14.534443+00:00", "vendors": ["mik", "mik$PRODUCT$cryptx"]}