EUVD-2026-70261
GHSA-9pfj-rxxp-9cf2
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local session access with low privileges required; C:H for full vault export; I:L since key retrieval is read-only with no direct write path; A:N as no service disruption occurs.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4DescriptionCVE.org
UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a standard local process within the same Windows session to decrypt the protected vault files and export the entire password manager contents in cleartext.
AnalysisAI
Insecure credential storage in UpSignOn for Windows (before 7.19.0) exposes the biometric unlock key from the Windows PasswordVault API to any standard process running in the same user session, requiring no authentication prompt. An attacker with low-privilege local code execution can retrieve this key, decrypt the protected vault files on disk, and export the entire password manager contents in cleartext. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have a process executing within the same Windows user session as the UpSignOn installation, with at least standard low-privilege access (PR:L per the CVSS vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N) accurately reflects the threat model: local, low-privilege, no complexity, no user interaction, with high confidentiality impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade UpSignOn for Windows to version 7.19.0 or later; this is the vendor-confirmed fix documented in the release notes at https://upsignon.eu/en/resources/release-notes/app#7.19.0 and corroborated by the VulnCheck advisory. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Cleartext vault data in UpSignOn for Windows before 7.19.0 persists in process memory after the application locks, expos
Sensitive key retention in UpSignOn for Windows before 7.19.0 allows a local attacker with low privileges to recover the
Same weakness CWE-522 – Insufficiently Protected Credentials
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today