Description
openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by planting symlinks in group-writable token directories, resulting in privilege escalation or data exposure. Token and lock directories are 0770 (group-writable for token users), so any token-group member can plant files and symlinks inside them. When run as root, the base code handling token directory file access, as well as several openCryptoki tools used for administrative purposes, may reset ownership or permissions on existing files inside the token directories. An attacker with token-group membership can exploit the system when an administrator runs a PKCS#11 application or administrative tool that performs chown on files inside the token directory during normal maintenance. This issue is fixed in commit 5e6e4b4, but has not been included in a released version at the time of publication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| opencryptoki | opencryptoki | >= 2.3.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | opencryptoki | 3.27.0-1 | — |
| Debian 13 | opencryptoki | 3.23.0+dfsg-0.3+deb13u1 | — |
| Debian 12 | opencryptoki | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | opencryptoki | 3.26.0+dfsg-0ubuntu1.1 | USN-8707-1 |
| Ubuntu 25.10 | opencryptoki | No fix yet | — |
| Ubuntu 24.04 LTS | opencryptoki | 3.23.0+dfsg-0ubuntu3.1 | USN-8686-1 |
| Ubuntu 22.04 LTS | opencryptoki | 3.17.0+dfsg+20220202.b40982e-0ubuntu1.3 | USN-8686-1 |
| Ubuntu 20.04 LTS | opencryptoki | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | opencryptoki | No fix yet | — |
| Ubuntu 16.04 LTS | opencryptoki | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | opencryptoki +7 | 3.25.0-5.el10_1.2 | RHSA-2026:4717 |
| RHEL 9 | opencryptoki +7 | 3.25.0-4.el9_7.2 | RHSA-2026:5603 |
| RHEL 8 | opencryptoki +8 | 3.22.0-3.el8_10.2 | RHSA-2026:5587 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | opencryptoki +7 | 3.24.0-6.el10_0.1 | RHSA-2026:5917 |
| RHEL 9.6 EUS | opencryptoki +7 | 3.24.0-5.el9_6.1 | RHSA-2026:5919 |
| RHEL 9.4 EUS | opencryptoki +7 | 3.22.0-3.el9_4.2 | RHSA-2026:6006 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | opencryptoki-devel | 3.25.0-5.el10_1.2 | ALSA-2026:4717 |
| AlmaLinux 9 | opencryptoki +7 | 3.25.0-4.el9_7.2 | ALSA-2026:5603 |
| AlmaLinux 8 | opencryptoki +8 | 3.22.0-3.el8_10.2 | ALSA-2026:5587 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | opencryptoki | 3.25.0-5.el10_1.2 | RLSA-2026:4717 |
| Rocky Linux 9 | opencryptoki | 3.25.0-4.el9_7.2 | RLSA-2026:5603 |
| Rocky Linux 8 | opencryptoki | 3.22.0-3.el8_10.2 | RLSA-2026:5587 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | openCryptoki | 3.26.0-150700.5.12.1 | SUSE-SU-2026:0481-1 |
| SLES 12 SP5 | openCryptoki | 3.17.0-5.19.2 | SUSE-SU-2026:0581-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | openCryptoki | 3.26.0-160000.1.1 | SUSE-SU-2026:22365-1, SUSE-SU-2026:20434-1 |
| SLES 16.0 | openCryptoki | 3.26.0-160000.1.1 | SUSE-SU-2026:22365-1, SUSE-SU-2026:20434-1 |
| SLE Micro 6.2 | openCryptoki | 3.26.0-160000.1.1 | SUSE-SU-2026:22293-1, SUSE-SU-2026:20345-1 |
| SLE Micro 5.5 | openCryptoki | 3.23.0-150500.3.12.1 | SUSE-SU-2026:0569-1 |
| SLE Micro 5.4 | openCryptoki | 3.17.0-150400.4.11.1 | SUSE-SU-2026:0824-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openCryptoki | 3.26.0-4.1 | openSUSE-SU-2026:10086-1 |
| openSUSE Leap 16.0 | openCryptoki | 3.26.0-160000.1.1 | openSUSE-SU-2026:21059-1, openSUSE-SU-2026:20233-1 |
| openSUSE Leap 15.6 | openCryptoki | 3.23.0-150600.3.14.1 | SUSE-SU-2026:0351-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | opencryptoki +5 | 3.7.0-1.amzn2.0.1 | ALAS2-2026-3283 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | opencryptoki | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | opencryptoki | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | opencryptoki +5 | 3.25.0-5.el10_1.2 | ELSA-2026-4717 |
| Oracle Linux 9 | opencryptoki +5 | 3.25.0-4.el9_7.2 | ELSA-2026-5603 |
| Oracle Linux 8 | opencryptoki +5 | 3.22.0-3.el8_10.2 | ELSA-2026-5587 |
Advisories 31
- ALSA-2026:4717 Moderate: opencryptoki security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:5603 Moderate: opencryptoki security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:5587 Moderate: opencryptoki security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-8707-1 opencryptoki vulnerabilities Ubuntu Security Notices (USN) · Sep 2, 2026
- WID-SEC-2026-0756 Red Hat Enterprise Linux: Schwachstelle ermöglicht Privilegieneskalation und Offenlegung von Informationen BSI CERT-Bund (WID) · Sep 1, 2026
- USN-8686-1 opencryptoki vulnerabilities Ubuntu Security Notices (USN) · Aug 31, 2026
- RHSA-2026:6006 Red Hat Security Advisory: opencryptoki security update Red Hat Security Advisories (RHSA) · Jul 3, 2026
- RHSA-2026:5919 Red Hat Security Advisory: opencryptoki security update Red Hat Security Advisories (RHSA) · Jul 3, 2026
- RHSA-2026:5917 Red Hat Security Advisory: opencryptoki security update Red Hat Security Advisories (RHSA) · Jul 3, 2026
- RHSA-2026:5603 Red Hat Security Advisory: opencryptoki security update Red Hat Security Advisories (RHSA) · Jul 3, 2026
- RHSA-2026:5587 Red Hat Security Advisory: opencryptoki security update Red Hat Security Advisories (RHSA) · Jul 3, 2026
- RHSA-2026:4717 Red Hat Security Advisory: opencryptoki security update Red Hat Security Advisories (RHSA) · Jul 3, 2026
- SUSE-SU-2026:22365-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Jul 2, 2026
- openSUSE-SU-2026:21059-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22293-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Jun 30, 2026
- ALAS2-2026-3283 Moderate: opencryptoki security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 13, 2026
- RLSA-2026:5603 Moderate: opencryptoki security update Rocky Linux Security Advisories · Apr 7, 2026
- RLSA-2026:5587 Moderate: opencryptoki security update Rocky Linux Security Advisories · Apr 7, 2026
- RLSA-2026:4717 Moderate: opencryptoki security update Rocky Linux Security Advisories · Mar 27, 2026
- ELSA-2026-5603 Moderate: opencryptoki security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Mar 24, 2026
- ELSA-2026-5587 Moderate: opencryptoki security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Mar 24, 2026
- openSUSE-SU-2026:20233-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2026:10086-1 openCryptoki-3.26.0-4.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20345-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20434-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0581-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0569-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0351-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Mar 23, 2026
- ELSA-2026-4717 Moderate: opencryptoki security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Mar 17, 2026
- SUSE-SU-2026:0824-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Mar 6, 2026
- SUSE-SU-2026:0481-1 Security update for openCryptoki SUSE / openSUSE Security Updates · Feb 13, 2026