Skip to content
OpenAdvisories

Vendor

cryptomator

9 known vulnerabilities.

Products

cryptomator 7 ios 1 android 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-33472

    Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass)

    Cryptomator is an open-source client-side encryption application for cloud storage. Version 1.19.1 contains a logic flaw in CheckHostTrustController.getAuthority() that allows an attacker to bypass the security fix for CVE-2026-32303. The method hardcodes the…

    cryptomator cryptomator
  • Medium 4.1
    CVE-2026-32310

    Cryptomator: Unverified masterkeyfile key IDs can access arbitrary local or UNC paths

    Cryptomator encrypts data being stored on cloud infrastructure. From version 1.6.0 to before version 1.19.1, vault configuration is parsed before its integrity is verified, and the masterkeyfile loader uses the unverified keyId as a filesystem path. The loade…

    cryptomator cryptomator
  • Medium 5.5
    CVE-2023-39520

    Cryptomator vulnerable to Local Elevation of Privileges

    Cryptomator encrypts data being stored on cloud infrastructure. The MSI installer provided on the homepage for Cryptomator version 1.9.2 allows local privilege escalation for low privileged users, via the `repair` function. The problem occurs as the repair fu…

    cryptomator cryptomator