PT-2026-25837 · Openssl+1 · Openssl+1

CVE-2026-4158

·

Published

2026-03-16

·

Updated

2026-04-21

CVSS v3.1

7.3

High

VectorAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions KeePassXC (affected versions not specified)
Description KeePassXC installations are susceptible to local privilege escalation. An attacker who can execute low-privileged code may be able to gain elevated access. This issue is related to the OpenSSL configuration and an uncontrolled search path element.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Uncontrolled Search Path Element

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-4158
GHSA-4GR2-CR97-Q9FX
ZDI-26-215

Affected Products

Keepassxc
Openssl