CVE-2026-77572

VeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier, selected metadata IOCTL handlers in the VeraCrypt Windows veracrypt.sys driver accept caller-supplied object-manager and device paths broader than supported VeraCrypt workflows require. A local user who can open the intentionally user-accessible \.\VeraCrypt device can use TC_IOCTL_GET_RESOLVED_SYMLINK, TC_IOCTL_GET_DRIVE_PARTITION_INFO, VC_IOCTL_GET_DRIVE_GEOMETRY_EX, or the legacy TC_IOCTL_GET_DRIVE_GEOMETRY handler to make src/Driver/Ntdriver.c perform kernel-context symbolic-link or disk-device lookups outside the intended path scope. This can disclose low-sensitivity drive-letter targets, partition information, disk geometry, GPT or MBR state, and limited object-manager path metadata.

• CWE-200

• https://github.com/veracrypt/VeraCrypt/commit/ca35405421df549e75f1f241259bdda0c5b67d40
• https://github.com/veracrypt/VeraCrypt/releases/tag/VeraCrypt_1.26.29
• https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-9mgv-w2fw-3m78

Published

Oct 14, 2026

Last Modified

Oct 16, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-77558A malicious actor with access to the network could exploit a…7.5
• CVE-2026-77560Tinyauth is an authentication and authorization server. Prio…8.1
• CVE-2026-77561Tinyauth is an authentication and authorization server. Prio…5.3
• CVE-2026-77564Talos Linux is a Linux distribution built for Kubernetes dep…3.3
• CVE-2026-77567Filament is a collection of full-stack components for accele…8.1
• CVE-2026-77568Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-77573Weblate is a web-based continuous localization platform used…3.5
• CVE-2026-77581BentoPDF is a client-side PDF toolkit that is self hostable.…8.6
• CVE-2026-77582Tinyauth is an authentication and authorization server. Prio…6.9
• CVE-2026-77584Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that …8.2
• CVE-2026-77585The Okta Privileged Access client does not reject a leading …5.3
• CVE-2026-77586In MongoDB Connector for BI, MongoDB object names such as co…8