CVE-2026-107171: Trellix Trellix Agent vulnerability
Published Oct 14, 2026
·Updated
An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.
Affected Software
1 affected component
Trellix Trellix Agent=5.8.4
Event History
Oct 14, 2026
CVE Published
via MITRE·07:11 AM
Data Sourced
via MITRE·07:11 AM
DescriptionWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Regular users on systems running Trellix Agent 5.8.4 are identified as able to decrypt the affected database.
2
What component is involved in the database decryption issue?
The issue is associated with mfecryptc.dll in Trellix Agent 5.8.4.