Vulnerability Description
openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jahlives | Openssl Encrypt | < 1.4.9 |
Related Weaknesses (CWE)
References
- https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-539p-fxf4-7Vendor Advisory
- https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-terminal-injecThird Party Advisory
FAQ
What is CVE-2026-81696?
CVE-2026-81696 is a vulnerability with a CVSS score of 3.3 (LOW). openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repa...
How severe is CVE-2026-81696?
CVE-2026-81696 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-81696?
Check the references section above for vendor advisories and patch information. Affected products include: Jahlives Openssl Encrypt.