I'm aware of existing literature that shows in a comprehensive manner just how simple it is to tweak the ciphertext of AES-CBC such that the decrypted message ends up being entirely different than what it was originally (due to the lack of a MAC to provide AEAD).
Can This Be Used to Compromise Encrypted Keys?
Specifically, I came across documentation for a popular piece of software that countless individuals around the world use. This software package generates a private/public key pair for the end user (secp256k1) and encrypts the private key with AES-256-CBC.
Wondering if CBC Mode Poses Any Issue Here
To be clear, by 'issue', I'm referring to the outright recovery of the private key that was encrypted.
If the secret key is damaged / altered in this scenario, that's of no concern (for the question). Not sure if it makes a difference to add in that the key will be decrypted and re-encrypted as it is used (not sure if there is any leakage of the private key data that occurs during this time).