EUVD-2026-53819
GHSA-2x9j-ppfr-c4pq
Severity by source
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Local-only attack requiring low-privilege account and active user OTP invocation; OTP secret exposure yields high confidentiality impact with no integrity or availability effect.
Primary rating from Vendor (TR-CERT).
CVSS VectorVendor: TR-CERT
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting.
This issue affects eta-otp-lock: before 1.0.4.
AnalysisAI
eta-otp-lock before version 1.0.4 exposes sensitive information - likely OTP codes or credentials - as visible process arguments during invocation, enabling local system footprinting by other users. The vulnerability maps to CWE-214, where secrets passed via command-line arguments or process environment can be read by any local user through standard OS interfaces such as /proc or ps. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the attacker already holds a local account on the target system with at least standard (non-root) user privileges (CVSS PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD CVSS 3.1 score of 5.0 (Medium) reflects an exclusively local attack surface (AV:L), low-privilege requirement (PR:L), and mandatory user interaction (UI:R), all of which substantially constrain exploitability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A local user on a shared system running eta-otp-lock polls 'ps aux' or reads /proc/<pid>/cmdline at the moment a legitimate user authenticates via the OTP tool, capturing the OTP value passed as a visible process argument. The attacker then immediately reuses the intercepted OTP before it expires to bypass authentication. … |
| Remediation | Upgrade to eta-otp-lock version 1.0.4 or later, which resolves the visible sensitive information exposure per the TR-CERT advisory at https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0753. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Eta Otp Lock
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today