CVE-2026-71851

A flaw was found in crypto-js. The CryptoJS.lib.WordArray.random() function, used for generating cryptographic secrets, employs a weak pseudorandom number generator instead of a cryptographically secure source. This significantly reduces the randomness of generated values, such as those used for cryptocurrency wallet recovery phrases. An attacker can exploit this by enumerating the limited possible outputs, potentially recovering private keys and gaining unauthorized control over associated funds in affected applications.

Impact has been assessed as Important. Exploitation requires a consuming application to specifically call CryptoJS.lib.WordArray.random() to generate security-sensitive values (for example, cryptocurrency wallet recovery phrases); merely depending on a vulnerable crypto-js release is not sufficient to be exploitable. Successful exploitation additionally requires brute-force enumeration of a reduced, but non-trivial, entropy search space rather than a straightforward unauthenticated network attack. Red Hat products bundling crypto-js (as an npm dependency of the .NET SDK, the Vaultwarden web client, Cockatrice, Insights Chrome, Camel Spring Boot, and the Satellite Insights Advisor frontend) already ship crypto-js 4.2.0, which includes the upstream fix, and are not known to use CryptoJS.lib.WordArray.random() to generate security-sensitive values such as cryptographic keys or wallet recovery phrases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.