An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with the 1Password service.
| Software | From | Fixed in |
|---|---|---|
| 1password / 1password_in_the_browser | - | 2.3.4 |
| 1password / connect | - | 1.5.3 |
| 1password / scim_bridge | - | 2.3.2 |
| 1password / command-line | 2.0.0 | 2.3.0 |
| 1password / 1password | 8.0 | 8.8.0-94 |
| 1password / 1password | 7.0 | 7.9.6 |
| 1password / 1password | 8.0 | 8.8.0-104 |
| 1password / 1password | 7.0 | 7.9.3 |
| 1password / 1password | 8.0 | 8.7.1 |
| 1password / 1password | 7.0 | 7.9.5 |
| 1password / 1password | 7.0 | 7.9.829 |
| 1password / command_line_interface | 1.0.0 | 1.12.5 |