Back Cybersecuritynews

25 Vulnerabilities in Cloud Password Managers Allow Unauthorized Access and Modifications

Cybersecuritynews •Guru Baran • February 17, 2026

Researchers from ETH Zurich have uncovered 25 serious vulnerabilities in three leading cloud-based password managers: Bitwarden, LastPass, and Dashlane. These flaws enable a malicious server to bypass zero-knowledge encryption claims, allowing unauthorized access, modification, and recovery of users’ stored passwords and vault data. Bitwarden, LastPass, and Dashlane collectively serve over 60 million users and hold […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerabilities in Password Managers Expose User Credentials Researchers from ETH Zurich and Università della Svizzera italiana identified vulnerabilities in four cloud-based password managers: Bitwarden, LastPass, Dashlane, and 1Password. These flaws could allow attackers to view and alter passwords stored in user vaults, undermining the security claims of these services, particularly regarding zero-knowledge encryption. Users of these password managers are affected by the potential exposure of their credentials. 16 sources 37

Extracted Entities

25 Vulnerabilities in Cloud Password Managers Allow Unauthorized Access and Modifications

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Tools (2)