CVE-2026-96293
CVE-2026-96293 · Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.
CVSS 6.9 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
watchguard agent
- Versions
- ≥ 0, < 1.17.23.0000: Affected (semver)
Update to 1.17.23.0000