CVE-2026-96293 — Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File

CVE-2026-96293

Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File PUBLISHED

Description (CNA)

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file left readable by all local users.

Affected (CNA)

Vendor / product	Versions
WatchGuard / WatchGuard Agent	affected 0 before 1.17.23.0000

CWE

CWE-312, CWE-532, CWE-732

References

https://psirt.watchguard.com/CVE-2026-96293

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.