Log in Start free

cryptomator

Products

ProductCVEsExploitedLatest
cryptomator7–Apr 16, 2026
android1–Mar 20, 2026
ios1–Mar 20, 2026

Exploited and recent CVEs

  • CVE-2026-33472 Medium 4.8 Cryptomator Hub OAuth token exchange HTTP downgrade via getAuthority() scheme confusion (CVE-2026-32303 bypass) 0.1%
  • CVE-2026-32317 High 7.6 Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub API <0.1%
  • CVE-2026-32318 High 7.6 Cryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API <0.1%
  • CVE-2026-32310 Medium 4.1 Cryptomator: Unverified masterkeyfile key IDs can access arbitrary local or UNC paths 0.3%
  • CVE-2026-32309 High 8.7 Cryptomator: Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes 0.2%
  • CVE-2026-32303 High 7.6 Cryptomator: Tampered vault configuration allows MITM attack on Hub API 0.1%
  • CVE-2026-29110 Low 2.2 Cryptomator: Leaking of cleartext paths into log file in non-debug mode 0.1%
  • CVE-2023-39520 Medium 5.5 Cryptomator vulnerable to Local Elevation of Privileges 0.3%
  • CVE-2023-37907 High 7.0 Cryptomator's MSI installer allows local privilege escalation 0.2%