Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads configuration from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of KeePassXC when run by a target user on the system. Was ZDI-CAN-29156.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-17 | 1 | Disclosure1 |
| 2026-03-18 | 1 | General1 |
| 2026-04-19 | 1 | General1 |
| 2026-04-21 | 1 | Disclosure1 |
CVE-2026-4158 KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privile… https://www.cve.org/CVERecord?id=CVE-2026-4158
Post summary
The text references a local privilege escalation vulnerability in KeePassXC related to OpenSSL configuration, but lacks PoC, exploit details, patch information, or active exploitation claims.
🚨 HIGH SEVERITY: CVE-2026-4158 (CVSS 7.3) KeePassXC OpenSSL config flaw allows local privilege escalation via uncontrolled search path. Impact: Arbitrary code execution in KeePassXC context Requires: Low-priv access + user interaction #CVE #Vulnerability #PatchNow https://t.co/gjN5fx0Wz9
Post summary
The tweet announces a high‑severity CVE-2026-4158 affecting KeePassXC with local privilege escalation, providing technical details but no PoC, exploit code, or indications of active exploitation.
KeePassXC installations are vulnerable to local privilege escalation via CVE-2026-4158, allowing attackers to gain elevated access after executing low-privileged code, with a CVSS rating of 7.3 assigned by ZDI.
Post summary
KeePassXC is vulnerable to CVE-2026-4158, a local privilege escalation with a CVSS score of 7.3.
KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVE-2026-4158) #CyberSecurity #KeePassXC #LocalPrivilegeEscalation #OpenSSL https://www.systemtek.co.uk/?p=48768 https://t.co/u1vB2ZsaFN
Post summary
The tweet announces the existence of CVE-2026-4158 for KeePassXC, noting an OpenSSL configuration issue that could lead to local privilege escalation, and provides a link for further details.