CVE-2021-47863CWE-428

MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path

High · published January 21, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

⚡ A local attacker can exploit a sneaky unquoted service path in Encrypto 1.0.1! This could let them execute arbitrary code without breaking a sweat! 🔥 Think of it as a restaurant where the chef skips the critical step of checking the order before cooking — anyone could slip in a nasty ingredient and alter the entire dish! 🍽️ This vulnerability could allow an attacker to plant malicious executables in the service path, potentially gaining full control over the system. They could execute anything from stealing sensitive information to launching a devastating attack on your data. It's a serious risk that could leave you vulnerable to significant exploits!

Put simply

Think of it as a restaurant where the chef skips the critical step of checking the order before cooking — anyone could slip in a nasty ingredient and alter the entire dish! 🍽️ MacPaw Encrypto 1.0.1 features an unquoted service path vulnerability, enabling local attackers to inject malicious code into the Encrypto Service. This oversight allows the execution of arbitrary code with elevated privileges, putting users at risk.

What to do

This vulnerability could allow an attacker to plant malicious executables in the service path, potentially gaining full control over the system. They could execute anything from stealing sensitive information to launching a devastating attack on your data. It's a serious risk that could leave you vulnerable to significant exploits! To safeguard against this vulnerability, update Encrypto to the latest version where this flaw is patched. Additionally, ensure that service paths are properly quoted to prevent future exploitation. Regularly audit your system for unquoted paths to enhance your security posture. You've got this! With these steps, you can secure your system and maintain your security hero status! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00151 · 3.9th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2026-01-21T17:27Z
EPSS history
Timeline
  • 21 JAN 17:27Z
    MacPaw Encrypto 1.0.1 - 'Encrypto Service' Unquoted Service Path
    cvelistv5