CVE-2012-4571: Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyri...

Security readout for executives and security teams

Python Keyring 0.9.1 could encrypt saved passwords with weak cipher initialization for CryptedFileKeyring files. A local user with access to those files may have an easier path to brute-force stored passwords. This is not presented as a remote compromise. Exposure is likely limited to systems using Python Keyring 0.9.1 with CryptedFileKeyring files. The provided CVE data does not identify CPEs, downstream package versions, or non-Python-keyring products. Treat as a targeted credential-protection issue. Prioritize systems where local users, shared workstations, build servers, or legacy automation may access stored keyring files. Business urgency is lower than remote code execution but higher where sensitive passwords were stored. Mitigation focus: Check Python Keyring and operating system vendor advisories for fixed packages.; Replace Python Keyring 0.9.1 where CryptedFileKeyring is used.; Rotate passwords stored in affected CryptedFileKeyring files after remediation..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.