Description
KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trigger the vulnerability by dragging and dropping malicious HTML files into the help area, potentially causing application instability or crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Keepass | KeePass Password Safe | < 2.44 | — |
Advisories 1
- WID-SEC-2026-0396 KeePass Password Safe: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 11, 2026
References
- ExploitDB-47952 exploit
- KeePass Official Homepage product
- VulnCheck Advisory: KeePass 2.44 - Denial of Service (PoC) third-party-advisory