EUVD-2026-67039

opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...

CVE-2026-81683

CVE-2026-81683 affects the openssl_encrypt Python package (pip name openssl-encrypt) versions 1.4.8 and earlier . The vulnerability is in the desktop GUI's Settings screen, where a "combined certificate and private key" PEM field stores an mTLS client private key in cleartext within a world-reada...

CVE-2026-81681 openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage

opensslencrypt pip package openssl-encrypt versions = 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the workspace encrypted, but the workspace directory is actually stored in cleartext and the derived encryption k...

CVE-2026-81681 openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage

opensslencrypt pip package openssl-encrypt versions = 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a marker declaring the workspace encrypted, but the workspace directory is actually stored in cleartext and the derived encryption k...

PT-2026-82614

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description Insufficient controls during the execution of untrusted third-party plugins allow for arbitrary code execution with the privileges of the user running the software. This occurs because the...

PT-2026-82609

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The enroll trust key function uses suffix-tolerant fingerprint matching when binding a plugin-signing trust anchor. This allows an operator to confirm a short, forgeable GPG key ID, potential...

PT-2026-82586

openssl encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing attackers to inject control characters and line separators into the irreversible-removal confirmation dialog. Attackers can craft encrypted files with malicious slot identifiers containing...

PT-2026-82612

openssl encrypt pip package openssl-encrypt before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted attacker with physical write access. USBDriveCreator. verify integrity file only validates files listed in the manifest, s...

PT-2026-82590

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software derives the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password. This results in identical keys being used across all users and files. An attacker...

PT-2026-82602

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software uses a denylist to identify trusted built-in plugins, which allows unsigned plugins located in top-level plugins/ directories and unknown subdirectories to bypass signature...

CVE-2026-81697: Untrusted Search Path

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

CVE-2026-81705: Insertion of Sensitive Information into Log File

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...

PT-2026-82597

openssl encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...

PT-2026-82599

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description A shell injection issue exists in the info command's reconstructed CLI block. The system interpolates untrusted metadata fields without proper quoting, allowing attackers to craft metadata...

PT-2026-82603

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software fails to re-derive and validate fingerprints when loading identities from the identity.json file. This allows attackers to substitute legitimate public keys in identity stores wi...

PT-2026-82606

Name of the Vulnerable Software and Affected Versions openssl-encrypt versions prior to 1.4.9 Description The software fails to redact file passwords in the --debug argv dump when passwords are provided using bundled short-option spellings e.g., -apHunter2 or abbreviated long-option spellings e.g...

PT-2026-82615

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description An issue exists where the software fails to validate the memory cost parameter within identity file protection blocks. This allows an attacker with write access to local identity stores to...

PT-2026-82608

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software fails to sanitize the email field of imported identity documents. This allows attackers to inject ANSI escape sequences—special codes used to control terminal formatting—to forge...

PT-2026-82601

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description A signature verification issue exists in the gpg runner.verify detached function. The system accepts revoked and expired keys because it only checks the VALIDSIG status and fails to inspect...

PT-2026-82589

openssl encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to confirm guessed plaintexts offline or fingerprint identical plaintexts across separately-encrypted files...