Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
CVE-2025-46833: SimplePythonEncryption script vulnerable to weak key
CVE-2025-46833 · published 1 year ago
Summary
The Python example file Programs/P73_SimplePythonEncryption.py uses an encryption key that is too small, allowing attackers to guess the key and read the encrypted data. This puts any data protected by the script at risk of being revealed. Update to the latest version that uses a larger key (at least 2048 bits for RSA/DSA or 256 bits for ECC) or manually increase the key size to protect the data.
Original advisory text
Programs/P73_SimplePythonEncryption.py has weak cryptographic key
Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker may be able to decrypt the data using brute force attacks and because of this the whole application can be impacted. This issue has been patched in commit 6ce60b1. A workaround involves increasing the key size, for RSA or DSA this is at least 2048 bits, for ECC this is at least 256 bits.
References
- https://github.com/ShashikantSingh09/python-progrrames/security/advisories/GHSA-... Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46833... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-46833 Vendor Advisory
- https://github.com/ShashikantSingh09/python-progrrames/commit/6ce60b1b2116a579a2... Patch
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Severity
8.3
High
Type
CWE-326Inadequate Encryption Strength
Timeline
Published8 May 2025
Updated4 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta