KeePassXC Vulnerability Allows Privilege Escalation

CERT-Bund has released advisory WID-SEC-2026-0751 concerning a critical vulnerability in KeePassXC, a popular open-source password manager. The vulnerability, with a CVSS base score of 7.3, allows a local attacker to escalate their privileges on affected systems. This advisory applies to versions of KeePassXC earlier than 2.7.12, impacting users across Linux, UNIX, and Windows operating systems.

Users of KeePassXC are strongly advised to update to version 2.7.12 or later as soon as possible to mitigate the risk of privilege escalation. While the advisory indicates no remote attack vector, the potential for local privilege escalation poses a significant security risk to individual systems and potentially the networks they are connected to. Failure to update could lead to unauthorized access and further compromise of sensitive data.