VeraCrypt FUSE-T on macOS Allows Unauthorized Access to Decrypted Data

CVE-2026-108982

What is CVE-2026-108982?

The FUSE-T build of VeraCrypt 1.26.29 on macOS poses a security risk by not terminating its auxiliary service upon volume dismount. As a result, decrypted data remains accessible through a loopback SMB session, allowing unauthorized local users to remount the volume without the necessary passphrase. The auxiliary mount continues to serve the decrypted volume image even after the dismount process is completed, which can lead to significant data exposure risks.

References