CVE-2026-81718
HighCVSS 7.5Summary
openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping passwords offline using GPU or ASIC acceleration.
Risk Assessment
Weak KDF parameters allow attackers to guess passwords in reasonable time, potentially leading to exposure of sensitive data.
Recommendation
Update openssl_encrypt to version 1.4.9, which increases PBKDF2 iterations or uses more secure parameters.
Original NVD description (English source)
openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping passwords offline using GPU or ASIC acceleration.