CyberSecBulletin

KeePassXC vulnerabilities

We track 2 vulnerabilities in KeePassXC products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 11, 2026.

2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score

Latest KeePassXC vulnerabilities

  • 7.3 High severity

    KeePassXC: Uncontrolled Search Path Element

    CVE-2026-4158KeePassXC

    KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to exe

  • 7.1 High severity

    Keepassxc-browser: Cross-Site Request Forgery

    CVE-2025-65203KeePassXC

    KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form f