Skip to main content

openssl_encrypt CVE-2026-81689

| EUVDEUVD-2026-67045 HIGH
Use of Password Hash With Insufficient Computational Effort (CWE-916)
2026-08-27 VulnCheck GHSA-xg65-9m9r-rm73
Information Disclosure Openssl Encrypt
8.7
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.5 HIGH

Blob access assumed network-reachable without auth (PR:N, AV:N); offline attack requires no interaction; only confidentiality is impacted.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

3
Patch available
Aug 27, 2026 - 18:02 EUVD
Analysis Generated
Aug 27, 2026 - 17:41 vuln.today
CVE Published
Aug 27, 2026 - 14:50 cve.org
HIGH 8.7

DescriptionCVE.org

openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide offline password guessing at hardware speed to recover user passwords.

AnalysisAI

Weak pepper wrap key derivation in openssl_encrypt (versions before 1.4.9) allows fleet-wide offline password recovery against all users from a single precomputed dictionary table. The library derives its remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, producing identical wrap keys across every user and every file - eliminating the per-user randomness that salting is designed to provide. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Access or exfiltrate wrapped pepper blob storage
Delivery
Extract per-user pepper blobs
Exploit
Precompute single unsalted SHA-256 or HKDF-SHA256 dictionary table
Execution
Run GPU-accelerated offline lookup against all blobs
Impact
Recover plaintext passwords fleet-wide
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The attacker must first obtain one or more wrapped pepper blobs from the target system - via data breach, exposed backup, misconfigured object storage, or another read-access vector. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 8.7 with vector AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N is assessed as credible but conditional: the network vector and zero-privilege rating assume that wrapped pepper blobs are accessible without authentication - plausible in scenarios such as data breaches, exposed object storage, backup compromise, or insecure API endpoints, but not universally true. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who exfiltrates a backup archive or gains read access to the application's data store obtains a collection of wrapped pepper blobs for all users. Because the wrap key is derived from the password without a salt, the attacker precomputes a single SHA-256 or HKDF-SHA256 dictionary table covering common passwords and then tests it against every user's blob simultaneously using GPU hardware at billions of guesses per second, recovering passwords for a significant fraction of the user population in hours.
Remediation Upgrade to openssl_encrypt version 1.4.9 or later, which addresses the unsalted key derivation flaw according to the vendor's GitHub security advisory at https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-3v63-778v-3mvp. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, audit all systems for openssl_encrypt usage and identify installed versions, then evaluate whether wrapped password data could be accessed by external attackers. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Openssl Encrypt

View all
CVE-2026-74872 CRITICAL
9.3 Aug 17

Arbitrary native code execution in the jahlives openssl_encrypt Python package (all versions before 1.4.0) arises from i
CVE-2026-74899 CRITICAL
9.3 Aug 17

Sandbox escape in the openssl_encrypt Python library (jahlives) before 1.4.0 lets attacker-supplied plugin code break ou
CVE-2026-74887 CRITICAL
9.3 Aug 17

Insecure PRNG import in the jahlives openssl_encrypt Python package (all versions before 1.4.0) places Python's non-cryp
CVE-2026-81719 CRITICAL
9.3 Aug 27

Arbitrary code execution in openssl_encrypt (the jahlives Python encryption utility) before 1.4.9 allows an attacker-sup
CVE-2026-81717 CRITICAL
9.3 Aug 27

Cryptographic integrity bypass and weak key derivation in the openssl-encrypt Python package (jahlives) before 1.4.9 let
CVE-2026-81714 CRITICAL
9.3 Aug 27

Signature-trust bypass in the openssl_encrypt Python library (PyPI 'openssl-encrypt') versions 1.4.8 and earlier lets an
CVE-2026-81707 CRITICAL
9.3 Aug 27

Fingerprint-verification spoofing in jahlives openssl_encrypt before 1.4.9 lets attackers embed ANSI escape sequences in
CVE-2026-81706 CRITICAL
9.3 Aug 27

Silent cryptographic key substitution in jahlives openssl_encrypt before 1.4.9 lets attackers register 'shadow' contact

CVE-2026-81702 CRITICAL
9.3 Aug 27

Silent cryptographic key substitution affects openssl_encrypt (the jahlives Python encryption library) before 1.4.9, whi
CVE-2026-81701 CRITICAL
9.3 Aug 27

Arbitrary code execution in jahlives openssl_encrypt before 1.4.9 stems from a flawed plugin trust model that uses a den
CVE-2026-81700 CRITICAL
9.3 Aug 27

Signature verification bypass in openssl_encrypt (the jahlives Python encryption library) before version 1.4.9 lets atta
CVE-2026-81698 CRITICAL
9.3 Aug 27

Arbitrary command execution in jahlives' openssl_encrypt before 1.4.9 arises when the tool's 'info' command reconstructs

Same weakness CWE-916 – Use of Password Hash With Insufficient Computational Effort

View all
CVE-2018-15680 CRITICAL POC
9.8
CVE-2018-10618 CRITICAL POC
9.8
CVE-2019-19735 CRITICAL POC
9.1
CVE-2022-1235 HIGH POC
8.2
CVE-2023-33243 HIGH POC
8.1
CVE-2018-9233 HIGH POC
7.8
CVE-2024-23091 HIGH POC
7.5
CVE-2021-33563 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-81689 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy