CVE-2026-32303

CVE-2026-32303 is an integrity check vulnerability in Cryptomator versions prior to 1.19.1, allowing an attacker to tamper with the vault configuration file (vault.cryptomator). This flaw enables a man-in-the-middle attack during Hub key loading, as the client trusts unverified endpoints, potentially leading to token exfiltration. Rated Medium (CVSS 5.9), the vulnerability requires low privileges and high attack complexity, but can result in high confidentiality impact if an attacker can modify the vault configuration file. There is currently no evidence of active exploitation, nor are public exploit codes available in Metasploit, Nuclei, or ExploitDB, and it is not listed on the CISA KEV catalog.