Hardcoded Cryptographic Key Vulnerability in Trellix Agent by Trellix
CVE-2026-107171

6.9MEDIUM

Key Information:

Vendor

Trellix

Status
Trellix Agent
Vendor
CVE Published:
14 October 2026

What is CVE-2026-107171?

A security flaw exists in Trellix Agent version 5.8.4 that involves a hardcoded cryptographic key within the mfecryptc.dll component. This vulnerability allows unauthorized regular users to decrypt sensitive database information, posing significant risks to data integrity and security.

Affected Version(s)

Trellix Agent 5.8.4

References

https://support.trellix.com/s/article/000015866

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.