CVE-2026-39031

What it is

Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials. An 8-character prefix is stored in cleartext alongside the ciphertext. This allows an attacker with local access to recover any encrypted password to plaintext using a single SHA-1 hash and RC4 decryption operation, with no brute force required.

At a glance

Exploitability

Can be exploited locally on the machine with a low-privilege account. High risk of data exposure.

Exploit odds

0.1% chance of exploitation in the next 30 days (EPSS).

Fix

No patch or advisory is linked yet. Look at mitigations or restrict exposure.

Timeline

1. 2026-06-26 21:16 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-06-29 19:27 UTC Last updatedMost recent change to the record

Details

Published

2026-06-26 21:16 UTC

Last modified

2026-06-29 19:27 UTC

Exploit probability

0.1% · EPSS, next 30 days

Weakness

CWE-321

Record status

Deferred

Attack profile CVSS 3.1 · 5.5

Attack vector

Local

Complexity

Low

Privileges needed

Low

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None