CVE-2026-35467

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/CERTCC/cveClient/	Product
https://github.com/CERTCC/cveClient/pull/39	Issue Tracking Patch

Configurations

Configuration 1 (hide)

cpe:2.3:a:cmu:cveclient:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-04-02 21:16

Updated : 2026-07-24 21:10

NVD link : CVE-2026-35467

Mitre link : CVE-2026-35467

CVE.ORG link : CVE-2026-35467

JSON object : View

Products Affected

cmu

cveclient

CWE

CWE-522

Insufficiently Protected Credentials

{"id": "CVE-2026-35467", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35467", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-03T13:50:34.898716Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cret@cert.org", "affectedData": [{"vendor": "CERT/CC", "product": "cveClient/encrypt-storage.js", "versions": [{"status": "affected", "version": "0", "lessThan": "1.1.15", "versionType": "server"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-02T21:16:40.810", "references": [{"url": "https://github.com/CERTCC/cveClient/", "tags": ["Product"], "source": "cret@cert.org"}, {"url": "https://github.com/CERTCC/cveClient/pull/39", "tags": ["Issue Tracking", "Patch"], "source": "cret@cert.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cret@cert.org", "description": [{"lang": "en", "value": "CWE-522"}]}], "descriptions": [{"lang": "en", "value": "The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials."}, {"lang": "es", "value": "Las claves API almacenadas en el cliente de navegador temporal no est\u00e1n marcadas como protegidas, permitiendo que la consola de JavScript u otros errores permitan la extracci\u00f3n de las credenciales de cifrado."}], "lastModified": "2026-07-24T21:10:00.143", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cmu:cveclient:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD2EB9C3-2F62-4A8E-BCE4-2DFF17EA50C1", "versionEndExcluding": "1.0.24"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}