What is CVE-2017-7252?

It's a flaw in Botan's bcrypt before 2.1.0 that weakens hashing for 57-72 character passwords, speeding up cracks.

Which Botan versions have CVE-2017-7252?

All before 2.1.0. Upgrade immediately if affected.

Update to Botan 2.1.0+, rehash vulnerable passwords, consider switching to Argon2.

Your longest password might be your weakest link. CVE-2017-7252 exposes a bizarre flaw in Botan's bcrypt that hands crackers an edge.

theAIcatchup Apr 08, 2026 3 min read

Published by

Threat intelligence. Zero noise.

#Botan #CVE-2017-7252 #bcrypt vulnerability #password hashing

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by NVD Vulnerabilities