CVE-2026-74899
9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Summary
openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Python class hierarchy via class.mro.subclasses() to access system functions and execute arbitrary OS commands.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| jahlives | openssl_encrypt | 0 < 1.4.0 | affected |
| jahlives | openssl_encrypt | 1.4.0 | unaffected |
Weaknesses
- CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
References
- https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-m25m-ggxg-239c
- https://www.vulncheck.com/advisories/openssl-encrypt-before-sandbox-escape-via-type-hierarchy
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.