CVE-2026-69150: CWE-416: Use After Free in keepassxreboot keepassxc
Description
CVE-2026-69150 is a use-after-free vulnerability in KeePassXC prior to version 2.8.0-beta1. The issue arises when importing KeePass1 KDB legacy files that contain crafted metastream entries, leading to stale pointers being dereferenced. This can cause a heap use-after-free with a controlled write and a reliable process crash. The vulnerability has a medium severity score and is fixed in version 2.8.0-beta1.
CVSS v4.0
Score 4.3medium
Affected software
keepassxreboot
keepassxc
pkg:github/keepassxreboot/keepassxcRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
KeePassXC before 2.8.0-beta1 improperly retains raw Entry pointers in m_entryUuids after deleting metastream entries during KeePass1 KDB legacy import. A specially crafted .kdb file with an earlier metastream entry followed by a KPX_CUSTOM_ICONS_4 metastream referencing the earlier UUID causes parseCustomIcons4() to call Entry::setIcon on a stale pointer. This results in a heap use-after-free vulnerability that allows a controlled write and reliably crashes the process. The issue is addressed in version 2.8.0-beta1.
Potential Impact
An attacker who can supply a crafted .kdb file can trigger a heap use-after-free condition leading to a controlled write and a reliable crash of the KeePassXC process. This could potentially be leveraged to disrupt application availability or cause undefined behavior. The CVSS 4.0 score is 4.3 (medium severity), reflecting local attack vector, high attack complexity, and partial impact on availability and integrity.
Mitigation Recommendations
Upgrade KeePassXC to version 2.8.0-beta1 or later, where this use-after-free vulnerability has been fixed. No other mitigation is indicated or required.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-08-03T15:47:09.654Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ace52f62cdf04f65680e4f8
Added to database: 10/13/2026, 15:49:10 UTC
Last enriched: 10/13/2026, 16:03:49 UTC
Last updated: 10/13/2026, 16:08:24 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.