CVE-2026-81682

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-08-27

Last updated on: 2026-09-23

Assigner: VulnCheck

Description

openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissions. Attackers can read decrypted output files created by the GUI as unprivileged local users on multi-user systems.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-09-23

Generated

2026-10-07

AI Q&A

2026-08-27

EPSS Evaluated

2026-10-05

NVD

CVE-2026-81682

EUVD

EUVD-2026-67038

Affected Vendors & Products

Vendor	Product	Version / Range
jahlives	openssl_encrypt	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability affects openssl_encrypt versions before 1.4.9. The desktop GUI writes decrypted plaintext files with world-readable permissions by default, allowing any local user on a multi-user system to read these files.

Detection Guidance

Check file permissions of decrypted output files created by the openssl_encrypt GUI. Look for files with permissions 0644 or world-readable settings. Use commands like 'ls -l' to inspect file permissions or 'find / -type f -perm 0644' to locate such files.

Impact Analysis

Attackers could access sensitive decrypted data stored in files created by the GUI. This includes confidential information that should remain private, especially on shared systems where multiple users have access.

Compliance Impact

This vulnerability likely violates data protection regulations like GDPR and HIPAA, which require strict controls over sensitive data access. Unauthorized file access could lead to compliance breaches and legal consequences.

Mitigation Strategies

Upgrade openssl_encrypt to version 1.4.9 or later. Verify GUI output files have owner-only permissions (0600). Review and correct file permissions on existing decrypted files to restrict access.

Hi! I’m here to help you understand CVE-2026-81682. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70