CVE-2026-68766

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.

This update for hashcat fixes the following issues:

Changes in hashcat:

Update to snapshot v7.1.2-942-gef3508ed8:

• Addressed CVE-2026-68768 [boo#1276256], CVE-2026-68767 [boo#1276255], CVE-2026-68766 [boo#1276254]
• Feed plugins and attack-mode 8
• Probability-ordered PCFG and targeted hints in attack-mode 4
• Device-accelerated table attacks in attack-mode 5
• Wordlists inside masks with attack-mode 12
• Account-aware association in attack-mode 9
• Seekable wordlists and one cache location
• A brain server built for large sessions
• Rules in every attack-mode
• A Python bridge that uses every CPU thread

Update to release 7.1.2:

• New algorithms: AS/400 DES, AS/400 SHA1, Cisco-ISE SHA256, LUKS2-Argon2i KDF, KeePass KDBX v4, SAP CODVN H SHA512, sm3crypt, BLAKE2b-256, MD6, sha224

• Use BUILD_MODE=cross to not optimize for build machine CPU (boo#1248352)

Update to release 7.0.0:

• Full release notes at /usr/share/doc/packages/hashcat/docs/releases_notes_v7.0.0.md
• Assimilation Bridge: Integrate external resources like CPUs, FPGAs, embedded interpreters, and more into the cracking pipeline.
• Python Bridge Plugin: Rapidly implement hash-matching logic in Python. No recompilation needed, supports multithreading and rule engine by default.
• Virtual Backend Devices: Internally partitions physical GPUs into multiple logical devices for better bridge integration and async workloads.
• Hash-Mode Autodetection: Omit the -m flag and let Hashcat detect the hash-mode, or use --identify to list possibilities.
• 58 new application-specific hash types, including Argon2, MetaMask, Microsoft Online Account, SNMPv3, GPG, OpenSSH, and LUKS2
• 17 new generic hash constructions used in real-world web apps and protocols
• 11 new primitives added to the crypto library, improving reuse and plugin development
• 20 new tools to extract hashes from popular sources, including APFS, Virtualbox, BitLocker, and various wallet formats
• Complete refactor of the autotuning engine for better device utilization
• Major rewrite of memory management to eliminate previous 4GB allocation caps and enable full memory usage across devices