cryptomator

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

cryptomator records in CISA KEV

No cryptomator vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cryptomator 10 records HIGH

Records

10 records in Cryptomator · all components

TI-2023-19340 CVE-2023-37907

Cryptomator's MSI installer allows local privilege escalation

HIGH 69

Cryptomator is data encryption software for users who store their files in the cloud.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00196 Published 2023-07-25 No fix listed CWE-269

TI-2023-20652 CVE-2023-39520

Cryptomator vulnerable to Local Elevation of Privileges

HIGH 67

Cryptomator encrypts data being stored on cloud infrastructure.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0033 Published 2023-08-07 No fix listed CWE-269

TI-2026-24838 CVE-2026-32310

Cryptomator: Unverified masterkeyfile key IDs can access arbitrary local or UNC paths

MEDIUM 57

Cryptomator encrypts data being stored on cloud infrastructure.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00263 Published 2026-03-20 No fix listed CWE-22

TI-2026-25868 CVE-2026-33472

Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass)

MEDIUM 55

Cryptomator is an open-source client-side encryption application for cloud storage.

CVSS 3.1MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00106 Published 2026-04-16 Fixed in 1.19.2 CWE-305

TI-2026-24837 CVE-2026-32309

Cryptomator: Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes

LOW 39

Cryptomator encrypts data being stored on cloud infrastructure.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00213 Published 2026-03-20 Fixed in 1.19.1 CWE-319

TI-2022-09052 CVE-2022-25366 · GHSA-rg7g-mrvx-gg82

Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000…

LOW 35

Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00556 Published 2022-02-19 No fix listed CWE-426

TI-2026-24846 CVE-2026-32318

Cryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API

LOW 32

Cryptomator for IOS offers multi-platform transparent client-side encryption for files in the cloud.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00079 Published 2026-03-20 Fixed in 2.8.3 CWE-346

TI-2026-24845 CVE-2026-32317

Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub API

LOW 32

Cryptomator for Android offers multi-platform transparent client-side encryption for files in the cloud.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00065 Published 2026-03-20 Fixed in 1.12.3 CWE-346

TI-2026-24832 CVE-2026-32303

Cryptomator: Tampered vault configuration allows MITM attack on Hub API

LOW 32

Cryptomator encrypts data being stored on cloud infrastructure.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00115 Published 2026-03-20 Fixed in 1.19.1 CWE-346

TI-2026-23251 CVE-2026-29110

Cryptomator: Leaking of cleartext paths into log file in non-debug mode

LOW 23

Cryptomator encrypts data being stored on cloud infrastructure.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00142 Published 2026-03-06 Fixed in 1.19.0 CWE-209

Open these records in search →

Critical	0
High	7
Medium	3
Low	0
No CVSS	0