CVE-2026-81696

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-81696

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81696.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-81696

Aliases

GHSA-539p-fxf4-7fv8
PYSEC-2026-3775

Published

2026-08-27T14:50:59Z

Modified

2026-09-03T03:48:20Z

Severity

9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

openssl_encrypt before 1.4.9 Terminal Injection via info Command

Details

openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.

Database specific

{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-117"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81696.json"
}

References

Affected packages

Git / github.com/jahlives/openssl_encrypt

Affected ranges

Type

GIT

Repo

https://github.com/jahlives/openssl_encrypt

Events

Introduced

Fixed

39b0a010cae90520f74b7194f61fedd43af04ef8

Database specific

Show details

{
    "cpe": "cpe:2.3:a:jahlives:openssl_encrypt:*:*:*:*:*:python:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.4.9"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v1.*

v1.4.0

v1.4.1rc1

v1.4.1rc2

v1.4.2

v1.4.4

v1.4.5

v1.4.6

v1.4.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81696.json"