---
id: "CVE-2026-112168"
page: "https://infrastack.ai/live/CVE-2026-112168"
kind: "vulnerability"
aliases: ["CVE-2026-112168"]
title: "Magistra software: weak custom encryption and embedded secrets in database"
severity: "medium"
cvss: 6.0
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["magistra", "other"]
not_affected_if: []
published_at: "2026-11-09T13:17:04+00:00"
first_seen_at: "2026-11-09T13:26:49+00:00"
updated_at: "2026-11-09T13:27:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112168", "first_seen_at": "2026-11-09T13:26:49+00:00"}]
exploit_sources: []
---

# Magistra software: weak custom encryption and embedded secrets in database

Link for people: https://infrastack.ai/live/CVE-2026-112168 (this .md is for agents)

The Magistra software protects its database with custom encryption that is weak and uses an outdated compression algorithm. It also contains embedded secrets, so an attacker who obtains the code or data may be able to decrypt stored content.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-09T13:26:49+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112168

## From the sources

The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_