High severity8.8NVD Advisory· Published Aug 17, 2026· Updated Aug 17, 2026

CVE-2026-74883

Description

openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted_open file access controls.

Affected products

Jahlives/openssl_encryptllm-fuzzy
Range: <1.4.0

Patches

Vulnerability mechanics

References

github.com/jahlives/openssl_encrypt/security/advisories/GHSA-mcjj-qw7m-j3cpnvd
www.vulncheck.com/advisories/openssl-encrypt-before-sandbox-bypass-via-pathlib-and-ionvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000