CVE-2026-53762
VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPT_BACKEND route SHA-256 and SHA-512 volume-header key derivation through derive_key_sha256 and derive_key_sha512 in src/Crypto/wolfCrypt.c, where the configured iterations value is discarded and wc_HKDF is used instead of PBKDF2-HMAC. Changing the PIM or iteration count therefore does not increase derivation cost, allowing an attacker with an affected container, disk image, or volume header to perform substantially cheaper offline password guesses. Official precompiled VeraCrypt binaries and normal distribution packages use the standard PBKDF2 backend and are not affected. Volumes created by an affected WOLFCRYPT=1 build require backup and recreation because corrected builds derive different keys. This issue is fixed in version 1.26.29.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.2
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.06%
- CWE
- CWE-916
- Published
- 2026-08-21
- Last modified
- 2026-08-26
Affected products
- veracrypt VeraCrypt
Weakness type
Related vulnerabilities
- CVE-2026-86670 — aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
- CVE-2026-81704 — openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus
- CVE-2026-81689 — openssl_encrypt before 1.4.9 Weak Pepper Key Derivation
- CVE-2026-80211 — FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage
- CVE-2026-75112 — OTTO® Fleet Manager – Weak Password Hashing Configuration
- CVE-2026-74871 — openssl_encrypt before 1.4.6 KDF Bypass via Sequential-XOR
- CVE-2026-49005 — Root password hash exposure vulnerability in ZTE F689 product
- CVE-2026-57310 — Weak password hashing in Windu CMS