Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-96293

Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File

Description

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WatchGuard WatchGuard Agent

Default version status: unaffected

  • 0 to < 1.17.23.0000affected

References