This vulnerability (CVE-2026-5224) in Cryptosim is due to cleartext storage of sensitive information, classified under CWE-312. It allows an attacker with local access and low privileges to retrieve sensitive data embedded within the application. The vulnerability affects Cryptosim versions prior to 3.1.0.229. The CVSS 3.1 base score is 5.7, reflecting medium severity, with attack vector as adjacent network, low attack complexity, requiring low privileges, no user interaction, and high confidentiality impact but no integrity or availability impact.

An attacker with adjacent network access and low privileges can retrieve sensitive information stored in cleartext within the affected Cryptosim versions. This compromises confidentiality of sensitive data but does not affect integrity or availability.

No explicit patch or remediation details are provided. Since the affected versions are prior to 3.1.0.229, upgrading to version 3.1.0.229 or later is implied to remediate the issue. Users should verify with the vendor for official patches or updates. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.