CVE-2026-107171

Deferred Deferred - Pending Action

Hardcoded Cryptographic Key in Trellix Agent

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Trellix

Description

An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-107171

EUVD

EUVD-2026-100894

Affected Vendors & Products

Vendor	Product	Version / Range
Trellix	Trellix	Agent 5.8.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-321	The product uses a hard-coded, unchangeable cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves a hardcoded cryptographic key in Trellix Agent 5.8.4 through the mfecryptc.dll file. This flaw allows regular users to decrypt databases, potentially exposing sensitive information.

Detection Guidance

Detecting this vulnerability requires checking for the presence of hardcoded cryptographic keys in the Trellix Agent 5.8.4, specifically in the mfecryptc.dll file. Review the file for embedded keys or use static analysis tools to inspect the binary for cryptographic constants.

Impact Analysis

If exploited, this vulnerability could let unauthorized users decrypt databases, leading to data breaches, loss of confidential information, or unauthorized access to system data.

Compliance Impact

This vulnerability could violate compliance requirements like GDPR or HIPAA by enabling unauthorized access to sensitive data, potentially resulting in legal penalties, fines, or reputational damage.

Mitigation Strategies

Update Trellix Agent to a version that resolves the hardcoded cryptographic key issue. Remove or rotate any exposed keys used for database decryption. Restrict user access to sensitive decryption functions until patched.

Hi! I’m here to help you understand CVE-2026-107171. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70