CVE-2026-69150 KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entryUuids map

KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers in mentryUuids after deleting metastream entries. When a crafted, unlockable .kdb file contains an earlier metastream...

CVE-2026-69150

The KeePassXC cross-platform password manager is vulnerable to a heap use-after-free flaw in the KeePass1 / KDB legacy importer prior to version 2.8.0-beta1 . The root cause is the retention of raw Entry pointers in the m_entryUuids map after metastream entries are deleted. A crafted, unlockable ...