CVE-2026-118673 | Keepassxreboot KeePassXC up to 2.7.x Browser Integration BrowserMessageBuilder.cpp crypto_box_easy out-of-bounds write

October 29, 2026 Yanac

A vulnerability was found in Keepassxreboot KeePassXC up to 2.7.x. It has been rated as critical. Impacted is the function Botan::Sodium::crypto_box_easy of the file src/browser/BrowserMessageBuilder.cpp of the component Browser Integration. Performing a manipulation results in out-of-bounds write.

This vulnerability is identified as CVE-2026-118673. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More