Skip to content
OpenAdvisories

Vendor

rotki

1 known vulnerabilities.

Products

rotki 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-116071

    rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption

    rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password. Attackers who obtain an uploaded backup blob can run GPU-parallel off…

    rotki rotki