CVE-2026-107171: Medium severity Trellix Trellix Agent vulnerability
Published Oct 14, 2026
·Updated
An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.
Affected Software
1 affected component
Trellix Trellix Agent=5.8.4
Event History
Oct 14, 2026
CVE Published
via MITRE·07:11 AM
Data Sourced
via MITRE·07:11 AM
DescriptionWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Regular users on systems running Trellix Agent 5.8.4 are identified as able to decrypt the affected database.
2
What component is involved in the database decryption issue?
The issue is associated with mfecryptc.dll in Trellix Agent 5.8.4.