CVE-2026-104617

There are two invocations of qrencode to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system...

CVE-2026-104617 sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline

There are two invocations of qrencode to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system...

CVE-2026-104617

The sdbootutil utility contains a vulnerability where two invocations of qrencode to display QR codes leak sensitive private data, specifically the $pin and $key . This information is exposed via /proc//cmdline , making it accessible to arbitrary low-privileged users on the system. The vulnerabil...

QRExfiltrate - Tool That Allows You To Convert Any Binary File Into A QRcode Movie. The Data Can Then Be Reassembled Visually Allowing Exfiltration Of Data In Air Gapped Systems

This tool is a command line utility that allows you to convert any binary file into a QRcode GIF. The data can then be reassembled visually allowing exfiltration of data in air gapped systems. It was designed as a proof of concept to demonstrate weaknesses in DLP software; that is, the assumption...