CVE-2026-116071
Received Received - Intake

Weak Key Derivation in rotki Allows Backup Decryption

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulnCheck

Description
rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password. Attackers who obtain an uploaded backup blob can run GPU-parallel offline password guessing and decrypt the database containing exchange API keys, secrets, wallet addresses and transaction history.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116071
EUVD
EUVD-2026-109385

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
rotki rotki 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-916 The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

rotki before version 1.44.2 had a weak key derivation vulnerability in its premium cloud backup encryption. The vulnerability occurred because the premium sync key was derived using a single unsalted SHA-256 hash of the user password. This allowed attackers who obtained a backup file to perform GPU-accelerated offline brute-force attacks to guess the password and decrypt sensitive data such as exchange API keys, wallet addresses, secrets, and transaction history.

Detection Guidance

To detect this vulnerability, check if your rotki version is below 1.44.2. Run: rotki --version. If the version is older, the system is vulnerable. Additionally, inspect backup files for weak encryption by examining if the premium sync key is derived from an unsalted SHA-256 hash of the user password.

Impact Analysis

If you used rotki versions before 1.44.2 and uploaded a backup, attackers could potentially decrypt your backup file if they obtained it. This would expose your exchange API keys, wallet addresses, transaction history, and other sensitive financial data. The vulnerability allowed faster brute-force attacks due to the weak key derivation method.

Mitigation Strategies

Upgrade rotki to version 1.44.2 or later immediately. This version uses Argon2id for key derivation and AES-256-GCM encryption, addressing the weak key derivation issue. Ensure all devices using premium sync are updated, as older versions cannot restore newer backups.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116071. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart