Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-96293 EUVD-2026-108073GHSA-vq33-hqqq-p4pj

Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File

Published Oct 22, 2026 · Updated Oct 23, 2026 · Assigned by WatchGuard

Description

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

Affected products

VendorProductAffectedFixed
WatchGuard WatchGuard Agent < 1.17.23.0000 1.17.23.0000

References