CVE-2021-31797: Cyberark Credential Provider

Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The user identification mechanism used by CyberArk Credential Provider prior to 12.1 is susceptible to a local host race condition, leading to password disclosure.

Affected products

• Cyberark Credential Provider: before 12.1 (fixed in 12.1)

Published 2021-09-02. Last modified 2026-06-17.