CVE-2026-74870— openssl_encrypt before 1.4.8 Hardware Pepper Information Disclosure
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| jahlives | openssl_encrypt | < 1.4.8 | affected |
1.4.8 | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-74870
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
openssl_encrypt before 1.4.8 Hardware Pepper Information Disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
openssl_encrypt (pip) versions <= 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr (crypt_cli.py, handle_hsm_command). The printed value can persist in terminal scrollback, session recordings, or CI logs. Impact is limited because the pepper is derived from a random per-invocation test salt and is salt-bound, so the leaked value cannot be used to decrypt real files. A related plugin issue logged raw prf_data outside the secret-redaction path. Fixed in 1.4.8 (and 1.5.0) by removing the hex dumps and routing plugin debug output through the redaction layer.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| jahlives | openssl_encrypt | 0 ~ 1.4.8 | - |
II. Public POCs for CVE-2026-74870
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-74870
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-74870 (1)
Proof of Concept for CVE-2026-74870 (1)
Same Patch Batch · jahlives · 2026-08-17 · 30 CVEs total
| CVE-2026-74886 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Plugin Import Guard Bypass |
| CVE-2026-74901 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback |
| CVE-2026-74900 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode |
| CVE-2026-74889 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF |
| CVE-2026-74880 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Token Leakage via Query Parameters |
| CVE-2026-74894 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Authentication Bypass via Bearer Token |
| CVE-2026-74876 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption |
| CVE-2026-74896 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal |
| CVE-2026-74875 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Schema Validation Bypass |
| CVE-2026-74878 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 TOTP Rate Limiter Bypass |
| CVE-2026-74899 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy |
| CVE-2026-74872 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpool |
| CVE-2026-74895 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation |
| CVE-2026-74891 | 9.8 CRITICAL | openssl_encrypt before 1.4.0 Hardcoded Database Credentials |
| CVE-2026-74877 | 8.8 HIGH | openssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_key |
| CVE-2026-74893 | 8.8 HIGH | openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secrets |
| CVE-2026-74883 | 8.8 HIGH | openssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and io |
| CVE-2026-74874 | 7.5 HIGH | openssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selection |
| CVE-2026-74888 | 7.5 HIGH | openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation |
| CVE-2026-74884 | 7.5 HIGH | openssl_encrypt before 1.4.0 Path Traversal via plugin_id |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: openssl_encrypt
- CVE-2026-74901
openssl_encrypt before 1.4.0 Authentication Bypass via AES-C - CVE-2026-74899
openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarc - CVE-2026-74900
openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simu - CVE-2026-74896
openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attri - CVE-2026-74895
openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Proce
Same vendor: jahlives
- CVE-2026-74901
openssl_encrypt before 1.4.0 Authentication Bypass via AES-C - CVE-2026-74899
openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarc - CVE-2026-74900
openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simu - CVE-2026-74896
openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attri - CVE-2026-74895
openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Proce
Same weakness: CWE-532
- CVE-2026-75057
IntelliJ IDEA<2026.1.5 明文存储Git凭证 - CVE-2026-59911
Dell ObjectScale <4.3.0.1 日志注入致信息泄露 - CVE-2026-19483
The following vulnerabilities that can affect IBM Storage Sc - CVE-2026-18097
IBM® Db2® federated server could allow a local attacker to o - CVE-2026-19502
Insufficient redaction of sensitive configuration values in
V. Comments for CVE-2026-74870
No comments yet