---
id: "CVE-2026-116071"
kind: "vulnerability"
aliases: ["CVE-2026-116071"]
title: "rotki: weak unsalted key derivation lets attackers crack premium backups"
severity: "high"
cvss: 8.2
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["crypto-portfolio", "package", "premium-sync", "rotki"]
not_affected_if: ["local-only-use", "no-premium-sync"]
published_at: "2026-10-25T12:16:29+00:00"
first_seen_at: "2026-10-25T12:40:44+00:00"
updated_at: "2026-10-25T12:41:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116071", "first_seen_at": "2026-10-25T12:40:44+00:00"}]
---

# rotki: weak unsalted key derivation lets attackers crack premium backups

rotki derives its premium sync encryption key as a single unsalted SHA-256 of the user password. An attacker who obtains an uploaded backup can guess passwords offline on GPUs and decrypt the database, which holds exchange API keys, secrets, wallet addresses and transaction history.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed rotki version in the app's About screen or package metadata; versions below `1.44.2` are affected.
- Check whether premium sync backups have been uploaded from this account, since those are the blobs at risk.

## Fix

- Upgrade rotki to `1.44.2` or later.
- Rotate exchange API keys and secrets that were stored in a synced backup, since the backup may have been decrypted.
- Use a long, unique password for the rotki premium account.

## Timeline

- 2026-10-25T12:40:44+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116071

## From the sources

rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password. Attackers who obtain an uploaded backup blob can run GPU-parallel offline password guessing and decrypt the database containing exchange API keys, secrets, wallet addresses and transaction history.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_