KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

The primary impact of CVE-2026-4158 is the potential for local privilege escalation. An attacker who can already execute low-privileged code on a system running KeePassXC can exploit this vulnerability to gain higher-level access. This could allow them to read sensitive data stored within KeePassXC databases, modify system configurations, or even execute arbitrary code with the privileges of the KeePassXC process. The unsecured OpenSSL configuration path allows attackers to inject malicious configuration files, effectively hijacking the OpenSSL library's behavior within KeePassXC. This is a significant risk, especially in environments where KeePassXC is used to manage sensitive credentials.

Users of KeePassXC who are running version 2.7.11 are particularly at risk. Systems where KeePassXC is used to manage highly sensitive credentials, such as those in regulated industries or government agencies, face a heightened risk. Shared hosting environments where multiple users share the same system and KeePassXC installation are also vulnerable.

• linux / server:

journalctl -f | grep -i openssl
ps aux | grep keepassxc

• generic web:

curl -I <keepassxc_url>

1. 2026-04-11Disclosure

   disclosure

1. 已保留2026-03-13
2. 发布日期2026-04-11
3. 修改日期2026-04-13
4. EPSS 更新日期2026-04-18

The primary mitigation for CVE-2026-4158 is to upgrade KeePassXC to a version that incorporates the security fix. Until a patched version is available, consider restricting access to the OpenSSL configuration directory to prevent unauthorized modification. Implement strict file permissions and access controls to limit who can write to the configuration directory. Monitoring system logs for unusual file modifications or access attempts to the OpenSSL configuration directory can also help detect potential exploitation. After upgrade, confirm by verifying the OpenSSL version is updated and re-testing the configuration path access.