cryptomator vulnerabilities
9 published CVEs name cryptomator among the affected products.
- 9Published CVEs9 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-33472
Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass)
cryptomator · cryptomator
Medium4.8 - CVE-2026-32317
Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub API
cryptomator · android
High7.6 - CVE-2026-32318
Cryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API
cryptomator · ios
High7.6 - CVE-2026-32310
Cryptomator: Unverified masterkeyfile key IDs can access arbitrary local or UNC paths
cryptomator · cryptomator
Medium4.1 - CVE-2026-32309
Cryptomator: Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes
cryptomator · cryptomator
High8.7 - CVE-2026-32303
Cryptomator: Tampered vault configuration allows MITM attack on Hub API
cryptomator · cryptomator
High7.6 - CVE-2026-29110
Cryptomator: Leaking of cleartext paths into log file in non-debug mode
cryptomator · cryptomator
Low2.2 - CVE-2023-39520
Cryptomator vulnerable to Local Elevation of Privileges
cryptomator · cryptomator
Medium5.5 - CVE-2023-37907
Cryptomator's MSI installer allows local privilege escalation
cryptomator · cryptomator
High7.0