CVE-2026-22791 | openCryptoki up to 3.26.0 on Linux/AIX CKM_ECDH_AES_KEY_WRAP buffer size (GHSA-26f5-3mwq-4wm7)

January 13, 2026 Yanac

A vulnerability described as problematic has been identified in openCryptoki up to 3.26.0 on Linux/AIX. This affects an unknown part of the component CKM_ECDH_AES_KEY_WRAP. Executing a manipulation can lead to incorrect calculation of buffer size.

This vulnerability is registered as CVE-2026-22791. The attack needs to be launched locally. No exploit is available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More