CVE-2026-74873
MediumCVSS 5.5Summary
openssl_encrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/[pid]/cmdline to retrieve plaintext passwords and keystore passwords.
Risk Assessment
Passwords may be exposed to local system users, potentially leading to unauthorized access to password-protected resources.
Recommendation
Update openssl_encrypt to version 1.4.0 or later and avoid passing passwords via CLI arguments; use secure password input methods.
Original NVD description (English source)
openssl_encrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/[pid]/cmdline to retrieve plaintext passwords and keystore passwords.