rotki

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

rotki records in CISA KEV

No rotki vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-80151 CVE-2026-116071 · GHSA-qgg8-6p8q-vrp7

Weak key derivation in rotki premium cloud backup encryption

LOW 35

rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00201 Published 2026-10-25 Fixed in 1.44.2 CWE-916

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0