CVE-2026-77151
lin-snow Ech0 crypto.go MD5Encrypt risky encryption
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 5.4.2 can resolve this issue. The patch is named 9ce19a3b0d0765086a655f45d3a706ec1810404f. It is recommended to upgrade the affected component.
| CWE | CWE-327 CWE-310 |
| Vendor | lin-snow |
| Product | ech0 |
| Published | Aug 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for lin-snow ech0
Be the first to know when new low vulnerabilities affecting lin-snow ech0 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
lin-snow / Ech0
5.4.0 5.4.1
References
vuldb.com: https://vuldb.com/vuln/393736 vuldb.com: https://vuldb.com/vuln/393736/cti vuldb.com: https://vuldb.com/cve/CVE-2026-77151 vuldb.com: https://vuldb.com/submit/881015 github.com: https://github.com/lin-snow/Ech0/issues/314 github.com: https://github.com/lin-snow/Ech0/pull/315 github.com: https://github.com/lin-snow/Ech0/commit/9ce19a3b0d0765086a655f45d3a706ec1810404f github.com: https://github.com/lin-snow/Ech0/releases/tag/ech0-5.4.2 github.com: https://github.com/lin-snow/Ech0/
Credits
🔍 summmm (VulDB User)