Skip to main content

Ente 2of3 CVE-2026-73230

| EUVDEUVD-2026-56893 MEDIUM
Information Exposure (CWE-200)
2026-08-11 security-advisories@github.com
Information Disclosure
5.9
CVSS 4.0 · Vendor: github
Share

Severity by source

Vendor (github) PRIMARY
5.9 MEDIUM
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.1 MEDIUM

Local card access required and success depends on low-entropy secrets (AC:H); no privileges beyond card possession; confidentiality-only impact with no integrity or availability effect.

3.1 AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
4.0 AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (github).

CVSS VectorVendor: github

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

3
Source Code Evidence Fetched
Aug 11, 2026 - 23:27 vuln.today
Analysis Generated
Aug 11, 2026 - 23:27 vuln.today
Patch available
Aug 11, 2026 - 20:34 EUVD

DescriptionCVE.org

Ente provides end-to-end encrypted cloud services and security tools. Prior to 2026.07.28, Ente 2of3 card format version 1 stored the secret byte length and 32-bit FNV-1a checksum in cleartext on every card, allowing someone with one card to test candidate secrets offline and recover low-entropy or predictable secrets. This issue is fixed in version 2026.07.28.

AnalysisAI

Ente 2of3's version 1 card format undermines the information-theoretic guarantee of Shamir secret sharing by storing the secret's byte length and a 32-bit FNV-1a checksum in cleartext on every card, enabling single-card offline attacks. Any party who obtains or photographs one of the three recovery cards - a scenario the scheme was explicitly designed to render harmless - can enumerate low-entropy or predictable candidate secrets against the exposed checksum without needing a second card. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Recon
Obtain or photograph one version 1 recovery card
Delivery
Base64url-decode card payload
Exploit
Extract cleartext 16-bit secret length and 32-bit FNV-1a checksum
Install
Enumerate candidate secrets of confirmed length
C2
Compute FNV-1a for each candidate
Execute
Match against stored checksum
Impact
Recover full plaintext secret offline
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The attacker must have obtained at least one Ente 2of3 version 1 card - physically, as a photograph, or as a digital file - generated before version 2026.07.28. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:L/AC:H/AT:N/PR:N/UI:N/VC:H) correctly captures the two dominant limiting factors: local or physical access to a single card is required, and exploitation success is contingent on the protected secret being low-entropy - a real constraint that bounds practical exposure. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker obtains a photograph or digital copy of one of a target's three 2of3 version 1 recovery cards - for example, a card stored as a smartphone photo or left briefly unattended. By base64url-decoding the card payload, they read the cleartext 16-bit length and 32-bit FNV-1a checksum of the original secret. …
Remediation Upgrade to Ente 2of3 version 2026.07.28 or later, which introduces the version 2 card format. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-200 – Information Exposure

View all
CVE-2024-24919 HIGH POC
8.6
CVE-2016-6415 HIGH POC
7.5
CVE-2013-7331 MEDIUM POC
6.5
CVE-2025-31125 MEDIUM POC
5.3
CVE-2025-11749 CRITICAL POC
9.8
CVE-2017-16894 HIGH POC
7.5
CVE-2017-11165 CRITICAL POC
9.8
CVE-2020-3259 HIGH
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-73230 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy