Cryptomator vulnerabilities

Products

• Cryptomator 10

Newest

• cryptomator Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass) CVE-2026-33472 4.8 MediumApril 16, 2026
• cryptomator android, cryptomator +1 more Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub API CVE-2026-32317 7.6 HighMarch 20, 2026
• cisco ios, cryptomator +1 more Cryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API CVE-2026-32318 7.6 HighMarch 20, 2026
• cryptomator Cryptomator: Unverified masterkeyfile key IDs can access arbitrary local or UNC paths CVE-2026-32310 4.1 MediumMarch 20, 2026
• cryptomator Cryptomator: Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes CVE-2026-32309 8.7 HighMarch 20, 2026
• cryptomator Cryptomator: Tampered vault configuration allows MITM attack on Hub API CVE-2026-32303 7.6 HighMarch 20, 2026
• cryptomator Cryptomator: Leaking of cleartext paths into log file in non-debug mode CVE-2026-29110 2.2 LowMarch 6, 2026
• cryptomator Cryptomator vulnerable to Local Elevation of Privileges CVE-2023-39520 5.5 MediumAugust 7, 2023
• cryptomator Cryptomator's MSI installer allows local privilege escalation CVE-2023-37907 7.0 HighJuly 25, 2023
• cryptomator Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for... CVE-2022-25366 7.8 HighFebruary 19, 2022