Medium severity5.3OSV Advisory· Published May 11, 2026· Updated Jun 17, 2026
CVE-2026-6146
CVE-2026-6146
Description
Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys.
Amazon::Credentials stores credentials in an obfuscated form to prevent access to the secrets from a data dump of the object.
Before version 1.3.0, the secrets were encrypted using a 64-bit key that was generated using the built-in rand function, which is predictable and unsuitable for cryptography.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 1.2.0, 1.1.26, 1.1.25, …
- Range: <1.3.0
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.