CVE-2026-95105

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-95105

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-95105.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-95105

Aliases

EEF-CVE-2026-95105

Published

2026-10-06T08:37:56Z

Modified

2026-10-08T02:52:38Z

Severity

8.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping

Details

Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit flipping.

Cloak.Ciphers.AES.CTR encrypts with AES-256 in CTR mode and stores the key tag, the IV and the ciphertext with no MAC. decrypt/2 checks only the key tag and the minimum length before it returns the plaintext, and Cloak.Ciphers.Deprecated.AES.CTR decrypts the legacy format the same way. CTR is a stream cipher, so a value XORed into the stored ciphertext is XORed into the plaintext at the same offset. An attacker who can write to the encrypted store (for example through SQL injection or a compromised replica) and who knows or can guess a stored plaintext can replace it with any value of the same length. The application receives that value with no error.

This issue affects cloak: from 0.1.0-pre onward.

Database specific

{
    "cna_assigner": "EEF",
    "cwe_ids": [
        "CWE-649"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/95xxx/CVE-2026-95105.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.1.0-pre"
                },
                {
                    "fixed": "*"
                },
                {
                    "introduced": "2bd17019e285b55c5c218cc842537bf9280f24c3"
                },
                {
                    "fixed": "*"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/danielberkompas/cloak

Affected ranges

Type

GIT

Repo

https://github.com/danielberkompas/cloak

Events

Introduced

Fixed

2bd17019e285b55c5c218cc842537bf9280f24c3

Database specific

Show details

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-95105.json"