{"apiVersion":"1.0","identifier":"CVE-2026-81715","description":"openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserver bearer token passed as the positional argument to -keyserver set-token- in the --debug argv dump, because sanitize_argv_for_debug fails to sanitize it. As a result the token is printed in cleartext to stderr under --debug (even without --unsafe-show-secrets), persisting the credential in logs and terminal history. Fixed in 1.4.9.","publishedAt":"2026-08-27T17:21:01","lastModifiedAt":"2026-08-27T17:21:01","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-81715","cvssScore":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","epssProbability":0.00188,"riskScore":0.34,"affectedProduct":"openssl-encrypt","affectedVersions":"<=1.4.8","vulnerabilityType":"Library","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-81715","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-81715","en":"https://www.redsauce.net/en/cves/CVE-2026-81715","fr":"https://www.redsauce.net/fr/cves/CVE-2026-81715","pt":"https://www.redsauce.net/pt/cves/CVE-2026-81715","de":"https://www.redsauce.net/de/cves/CVE-2026-81715","sk":"https://www.redsauce.net/sk/cves/CVE-2026-81715","el":"https://www.redsauce.net/el/cves/CVE-2026-81715"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-81715"}}