Verified

CVE-2026-108982: VeraCrypt 1.26.29

Affected technology

VeraCrypt · 1.26.29
IDRIX

Component: FUSE-T build for macOS: auxiliary FUSE-T mount and dismount handling (FuseService)
File: src/Core/Unix/FuseService.cpp

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 7.2/10) rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 12-Oct-2026 09:35 UTC

CWE: CWE-459
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-12 09:37:50.126941+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-12 09:35:23.534032+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-108982.html