Data Leakage in Cryptomator: A Security Concern for Cloud Storage Solutions

CVE-2026-29110

What is CVE-2026-29110?

Cryptomator, a tool designed for encrypting data stored in cloud environments, faced an issue prior to version 1.19.0. In non-debug mode, the application may inadvertently log cleartext paths within its log files, especially when a filesystem request encounters an error such as a missing or corrupted file. This exposure could potentially reveal sensitive metadata about the files retained in a vault, even when the vault is closed. It is important to note that not every filesystem request failure results in path logging. This vulnerability has been addressed in the latest version, which eliminates the risk of such data leakage.

References