bitwarden

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

bitwarden records in CISA KEV

No bitwarden vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Cli · all components

TI-2026-31175 CVE-2026-42994 · GHSA-999x-2wm3-jfx8

MEDIUM 44

Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00306 Published 2026-05-01 No fix listed CWE-78