CVE-2026-85783

Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key. The header parser accepts any number of recipient stanzas, and unwrap_file_key tries every identity against every X25519 stanza. Each attempt runs a scalar multiplication, an HKDF and a ChaCha20-Poly1305 open. The header MAC cannot be checked first, because its key comes from the file key, which only a successful unwrap produces. Each stanza is 98 bytes of attacker-chosen header and buys one scalar multiplication per identity held, and the file is rejected only after every one of them has run. A caller reaches this through decrypt, decrypt_file or decrypt_filehandle whenever it decrypts a file it did not write.

• CWE-405
• CWE-770

• https://metacpan.org/release/GETTY/Crypt-Age-0.004/changes
• https://www.openwall.com/lists/oss-security/2026/10/20/39

Published

Oct 20, 2026

Last Modified

Oct 22, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-85756SSH.NET is a Secure Shell (SSH) library for .NET. Prior to 2…7.5
• CVE-2026-8576Inappropriate implementation in CORS in Google Chrome on Lin…4.3
• CVE-2026-85769A flaw was found in libtpms, a library that provides softwar…6.5
• CVE-2026-8577Integer overflow in Fonts in Google Chrome prior to 148.0.77…8.8
• CVE-2026-8578Out of bounds read in GPU in Google Chrome on Linux prior to…3.1
• CVE-2026-85781Unverified ownership of a storage access point in the volume…8.7
• CVE-2026-85786Improper handling of highly compressed data in Amazon ion-ja…7.5
• CVE-2026-85787An incomplete list of disallowed inputs in the SQL validatio…6.5
• CVE-2026-85788Incomplete list of disallowed inputs in the mutable SQL dete…5.5
• CVE-2026-85789Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-8579Insufficient validation of untrusted input in Skia in Google…3.1
• CVE-2026-85790Use after free in Microsoft QUIC allows an unauthorized atta…5.9