CVE-2026-53762

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53762", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-06-10T17:48:40.546Z", "datePublished": "2026-08-21T18:50:58.083Z", "dateUpdated": "2026-08-26T17:35:53.948Z"}, "containers": {"cna": {"title": "VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds)", "problemTypes": [{"descriptions": [{"cweId": "CWE-916", "lang": "en", "description": "CWE-916: Use of Password Hash With Insufficient Computational Effort", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-94c6-mgmv-mqc5", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-94c6-mgmv-mqc5"}, {"name": "https://github.com/veracrypt/VeraCrypt/commit/39f93910075e1cf492fcf4a9f99a53c7d0b96b87", "tags": ["x_refsource_MISC"], "url": "https://github.com/veracrypt/VeraCrypt/commit/39f93910075e1cf492fcf4a9f99a53c7d0b96b87"}, {"name": "https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.29", "tags": ["x_refsource_MISC"], "url": "https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.29"}], "affected": [{"vendor": "veracrypt", "product": "VeraCrypt", "versions": [{"version": "< 1.26.29", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-21T18:50:58.083Z"}, "descriptions": [{"lang": "en", "value": "VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPT_BACKEND route SHA-256 and SHA-512 volume-header key derivation through derive_key_sha256 and derive_key_sha512 in src/Crypto/wolfCrypt.c, where the configured iterations value is discarded and wc_HKDF is used instead of PBKDF2-HMAC. Changing the PIM or iteration count therefore does not increase derivation cost, allowing an attacker with an affected container, disk image, or volume header to perform substantially cheaper offline password guesses. Official precompiled VeraCrypt binaries and normal distribution packages use the standard PBKDF2 backend and are not affected. Volumes created by an affected WOLFCRYPT=1 build require backup and recreation because corrected builds derive different keys. This issue is fixed in version 1.26.29."}], "source": {"advisory": "GHSA-94c6-mgmv-mqc5", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-94c6-mgmv-mqc5", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-26T17:35:29.165865Z", "id": "CVE-2026-53762", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-26T17:35:53.948Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-53762", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-26T17:35:29.165865Z"}}}], "references": [{"url": "https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-94c6-mgmv-mqc5", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-26T17:35:50.242Z"}}], "cna": {"title": "VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds)", "source": {"advisory": "GHSA-94c6-mgmv-mqc5", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "veracrypt", "product": "VeraCrypt", "versions": [{"status": "affected", "version": "< 1.26.29"}]}], "references": [{"url": "https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-94c6-mgmv-mqc5", "name": "https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-94c6-mgmv-mqc5", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/veracrypt/VeraCrypt/commit/39f93910075e1cf492fcf4a9f99a53c7d0b96b87", "name": "https://github.com/veracrypt/VeraCrypt/commit/39f93910075e1cf492fcf4a9f99a53c7d0b96b87", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.29", "name": "https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.29", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPT_BACKEND route SHA-256 and SHA-512 volume-header key derivation through derive_key_sha256 and derive_key_sha512 in src/Crypto/wolfCrypt.c, where the configured iterations value is discarded and wc_HKDF is used instead of PBKDF2-HMAC. Changing the PIM or iteration count therefore does not increase derivation cost, allowing an attacker with an affected container, disk image, or volume header to perform substantially cheaper offline password guesses. Official precompiled VeraCrypt binaries and normal distribution packages use the standard PBKDF2 backend and are not affected. Volumes created by an affected WOLFCRYPT=1 build require backup and recreation because corrected builds derive different keys. This issue is fixed in version 1.26.29."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-916", "description": "CWE-916: Use of Password Hash With Insufficient Computational Effort"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-21T18:50:58.083Z"}}}, "cveMetadata": {"cveId": "CVE-2026-53762", "state": "PUBLISHED", "dateUpdated": "2026-08-26T17:35:53.948Z", "dateReserved": "2026-06-10T17:48:40.546Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-08-21T18:50:58.083Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "VeraCrypt", "vendor": "veracrypt", "versions": [{"status": "affected", "version": "< 1.26.29"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPT_BACKEND route SHA-256 and SHA-512 volume-header key derivation through derive_key_sha256 and derive_key_sha512 in src/Crypto/wolfCrypt.c, where the configured iterations value is discarded and wc_HKDF is used instead of PBKDF2-HMAC. Changing the PIM or iteration count therefore does not increase derivation cost, allowing an attacker with an affected container, disk image, or volume header to perform substantially cheaper offline password guesses. Official precompiled VeraCrypt binaries and normal distribution packages use the standard PBKDF2 backend and are not affected. Volumes created by an affected WOLFCRYPT=1 build require backup and recreation because corrected builds derive different keys. This issue is fixed in version 1.26.29."}, {"lang": "es", "value": "VeraCrypt proporciona cifrado de disco con seguridad robusta basado en TrueCrypt. Antes de la versi\u00f3n 1.26.29, las compilaciones no predeterminadas creadas con WOLFCRYPT=1 y WOLFCRYPT_BACKEND enrutan la derivaci\u00f3n de claves de encabezado de volumen SHA-256 y SHA-512 a trav\u00e9s de derive_key_sha256 y derive_key_sha512 en src/Crypto/wolfCrypt.c, donde el valor de iteraciones configurado se descarta y se utiliza wc_HKDF en lugar de PBKDF2-HMAC. Cambiar el PIM o el recuento de iteraciones, por lo tanto, no aumenta el costo de derivaci\u00f3n, permitiendo a un atacante con un contenedor, imagen de disco o encabezado de volumen afectado realizar suposiciones de contrase\u00f1a sin conexi\u00f3n sustancialmente m\u00e1s baratas. Los binarios precompilados oficiales de VeraCrypt y los paquetes de distribuci\u00f3n normales utilizan el backend PBKDF2 est\u00e1ndar y no se ven afectados. Los vol\u00famenes creados por una compilaci\u00f3n WOLFCRYPT=1 afectada requieren copia de seguridad y recreaci\u00f3n porque las compilaciones corregidas derivan claves diferentes. Este problema est\u00e1 solucionado en la versi\u00f3n 1.26.29."}], "id": "CVE-2026-53762", "lastModified": "2026-10-14T19:10:00.297", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-53762", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-26T17:35:29.165865Z", "version": "2.0.3"}}]}, "published": "2026-08-21T19:17:02.570", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/veracrypt/VeraCrypt/commit/39f93910075e1cf492fcf4a9f99a53c7d0b96b87"}, {"source": "security-advisories@github.com", "url": "https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.29"}, {"source": "security-advisories@github.com", "url": "https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-94c6-mgmv-mqc5"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-94c6-mgmv-mqc5"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-916"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.26.29)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "VeraCrypt", "source": "cna", "vendor": "veracrypt"}, "product": "veracrypt", "vendor": "veracrypt"}], "created": "2026-08-21T20:30:07.229206+00:00", "updated": "2026-08-21T20:30:07.389813+00:00", "vendors": ["veracrypt", "veracrypt$PRODUCT$veracrypt"]}