CVE-2026-74883

8.7 highEPSS 0.5%

High (8.7) in jahlives openssl encrypt. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in openssl-encrypt 1.4.0.

openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted_open file access controls.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-693
Published: 2026-08-17
Modified: 2026-09-01
Record from: the NVD, synced 2026-10-19

Affected

jahlives:openssl_encrypt

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
PYSEC-2026-3760	PyPI	openssl-encrypt	<1.4.0	1.4.0

References

Check your stack JSON