CVE-2023-39520

    Dashboard / Vulnerabilities / CVE-2023-39520

    CVE-2023-39520

    Published: 7 Aug 2023Last Modified: 12 Aug 2026

    Summary: Cryptomator vulnerable to Local Elevation of Privileges

    Details: Cryptomator encrypts data being stored on cloud infrastructure. The MSI installer provided on the homepage for Cryptomator version 1.9.2 allows local privilege escalation for low privileged users, via the `repair` function. The problem occurs as the repair function of the MSI is spawning an SYSTEM Powershell without the `-NoProfile` parameter. Therefore the profile of the user starting the repair will be loaded. Version 1.9.3 contains a fix for this issue. Adding a `-NoProfile` to the powershell is a possible workaround.

    References: https://github.com/cryptomator/cryptomator/releases/download/1.9.2/Cryptomator-1.9.2-x64.msi, https://github.com/cryptomator/cryptomator/releases/tag/1.9.3, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39520.json, https://github.com/cryptomator/cryptomator/security/advisories/GHSA-62gx-54j7-mjh3, https://nvd.nist.gov/vuln/detail/CVE-2023-39520, https://github.com/cryptomator/cryptomator/commit/727c32ad50c3901a6144a11cf984a3b7ebcf8b2b

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -34c0f1d13e66c026282802a48c4e2addb396f228

    Affected versions

    1.9.2
    1.9.1
    1.9.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-39520 | CVE-DB