Vulnerability in Cryptomator Ios
CVE-2026-32318
Cryptomator for IOS offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 2.8.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-t…
EPSS: 0.000 (4.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N.
Affected products
- Cryptomator Ios — versions < 2.8.3
Weakness classification (CWE)
References
- https://github.com/cryptomator/ios/security/advisories/GHSA-g7fr-c82r-hm6j (x_refsource_CONFIRM)
- https://github.com/cryptomator/ios/pull/444 (x_refsource_MISC)
- https://github.com/cryptomator/ios/commit/98c31280304af65c0932eb547d5fe4be2d16929c (x_refsource_MISC)
- https://github.com/cryptomator/ios/releases/tag/2.8.3 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-32318?
- CVE-2026-32318 is a high-severity vulnerability in Cryptomator Ios, classified under Origin Validation Error. CVSS score: 7.6/10. Published 2026-03-20.
- How severe is CVE-2026-32318?
- High severity. CVSS v3 base score is 7.6 out of 10.