---
id: CVE-2026-81704
title: >-
  openssl_encrypt versions before 1.4.9 contain a weak key derivation
  vulnerability in the D-Bus CryptoService.EncryptFile handler that uses
  unstretched SHA-256 instead of Argon2id
summary: >-
  openssl_encrypt versions before 1.4.9 contain a weak key derivation
  vulnerability in the D-Bus CryptoService.EncryptFile handler that uses
  unstretched SHA-256 instead of Argon2id. Attackers can perform offline
  password guessing against e…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-916
vendor: jahlives
product: openssl_encrypt
affected:
  - openssl_encrypt < 1.4.9
patched:
  - openssl_encrypt 1.4.9
published: '2026-08-27'
updated: '2026-09-03'
sourceUpdated: '2026-09-03T15:09:32.657'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-81704'
references:
  - url: >-
      https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-v9r6-grch-fxw7
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-weak-key-derivation-via-d-bus
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-08-27T18:38:46.143008Z'
ingestedAt: '2026-09-14T08:27:10.762Z'
epss: 0.00272
epssPercentile: 0.17439
---

## Overview

openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faster than documented protection by exploiting the missing key stretching and hash rounds.

## Affected

- `openssl_encrypt < 1.4.9`

## Remediation

Upgrade past the affected range:

- `openssl_encrypt 1.4.9`