Comment by paulpauper

AES CBC not broken, but it's likely LastPass implementation of AES was bad , such as bad RNG or other possible problems.