VULNERABILITY INTELLIGENCE

CVE-2026-74883

CVSS score8.8 HIGH

EPSS probability0.48%

CISA KEVNot currently listed

Published2026-08-17

Last modified2026-09-01

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted_open file access controls.

Weakness classification

disclosure@vulncheck.com: CWE-693

Primary references

disclosure@vulncheck.com — Exploit, Mitigation, Vendor Advisory
disclosure@vulncheck.com — Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Mitigation, Vendor Advisory