Risky Cryptographic Algorithm in lin-snow Ech0 Product

CVE-2026-77151

What is CVE-2026-77151?

A security flaw has been detected in the lin-snow Ech0 product prior to version 5.4.2, affecting the MD5Encrypt function located in internal/util/crypto/crypto.go. This issue can lead to the use of a risky cryptographic algorithm, thereby making the system susceptible to potential remote exploitation. While the complexity of an attack is high, organizations utilizing affected versions are advised to upgrade to version 5.4.2 to mitigate this risk. The patch addressing this vulnerability is identified by commit hash 9ce19a3b0d0765086a655f45d3a706ec1810404f.

References