{"id":"CVE-2026-81684","title":"In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument (on both encrypt and decrypt paths) inst…","summary":"In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument (on both encrypt and decrypt paths) inst…","severity":"medium","cvss":6.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-214"],"vendor":"jahlives","product":"openssl_encrypt","affected":["openssl_encrypt < 1.4.9"],"patched":["openssl_encrypt 1.4.9"],"published":"2026-08-27","updated":"2026-09-03","sourceUpdated":"2026-09-03T15:07:41.270","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-81684","references":[{"url":"https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-rx2c-m92f-qv6p","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-information-disclosure-via-command-line","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-08-27T18:24:06.748858Z"},"ingestedAt":"2026-09-14T14:14:34.871Z","epss":0.00166,"epssPercentile":0.05149,"slug":"CVE-2026-81684","body":"## Overview\n\nIn openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --stego-password argument (on both encrypt and decrypt paths) instead of via an environment variable as done for the main password. Any local user can read the steganography password from /proc/<pid>/cmdline for the lifetime of the subprocess. Fixed in 1.4.9.\n\n## Affected\n\n- `openssl_encrypt < 1.4.9`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `openssl_encrypt 1.4.9`","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":34.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}