CVE-2026-74895 — openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation
openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with…
Published: 2026-08-17 · CVSS: 9.3 · CVSS 4.0
openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7