CVE-2026-81695: Improper Output Neutralization for Logs in jahlives openssl_encrypt
Description
openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious key_id containing escape sequences to repaint terminal output and forge authenticity verification blocks.
CVSS v4.0
Score 9.3critical
Affected software
jahlives
openssl_encrypt
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2026-81695 affects jahlives openssl_encrypt versions prior to 1.4.9. It arises from failure to properly escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Maliciously crafted encrypted files can include key_id values with escape sequences, enabling attackers to repaint terminal output and forge authenticity verification blocks, potentially misleading users or automated systems relying on these logs.
Potential Impact
An attacker can exploit this vulnerability by providing specially crafted encrypted files that contain malicious key_id values. This can lead to terminal output manipulation and forgery of authenticity verification blocks, undermining trust in the decryption process and potentially causing users or systems to accept forged or manipulated data as authentic.
Mitigation Recommendations
A fix is available in jahlives openssl_encrypt version 1.4.9 and later. Users should upgrade to version 1.4.9 or newer to mitigate this vulnerability. No additional mitigations are specified in the provided data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-27T11:12:00.889Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a906bb7acd9273b4983a254
Added to database: 08/27/2026, 16:54:15 UTC
Last enriched: 10/02/2026, 15:55:47 UTC
Last updated: 10/09/2026, 18:48:23 UTC
Views: 47
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.