Is CVE-2026-81695 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-81695?

CVE-2026-81695 has a CVSS v3 severity of LOW (3.3).

Back

CVE-2026-81695

Description

openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can craft encrypted files with malicious key_id containing escape sequences to repaint terminal output and forge authenticity verification blocks.