The openssl_encrypt library before version 1.4.9 applies a weak key derivation algorithm in the D-Bus CryptoService.EncryptFile handler. It uses an unstretched SHA-256 hash instead of the recommended Argon2id, enabling attackers to perform offline brute‑force attacks roughly six to seven orders of magnitude faster than the intended protection. This flaw undermines the confidentiality of encrypted files, allowing an adversary who obtains the encrypted data to recover the passphrase and read the contents without needing privileged access to the system that created the file.

Systems running the jahlives openssl_encrypt library with any version older than 1.4.9 are affected. The vulnerability is specific to the D‑Bus CryptoService.EncryptFile interface exposed by this library.

The CVSS score of 8.7 indicates a high severity vulnerability. EPSS data is not available, so the precise exploitation probability is unknown, but the issue applies to the D‑Bus interface, which is typically accessible from local processes. The vulnerability is not listed in CISA’s KEV catalog. Attackers who can invoke the EncryptFile D‑Bus method or obtain encrypted files can rapidly guess the passphrase offline, making the exposure significant for confidential data.