Skip to content
CVE PROGRAM SOURCE RECORD2.2 Low

CVE-2026-29110

Cryptomator: Leaking of cleartext paths into log file in non-debug mode

Description

Cryptomator encrypts data being stored on cloud infrastructure. Prior to version 1.19.0, in non-debug mode Cryptomator might leak cleartext paths into the log file. This can reveal meta information about the files stored inside a vault at a time, where the actual vault is closed. Not every cleartext path is logged. Only if a filesystem request fails for some reason (e.g. damaged encrypted file, not existing file), a log message is created. This issue has been patched in version 1.19.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

cryptomator cryptomator

  • < 1.19.0affected

References