CVE-2026-74896

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.0

Description A sandbox escape exists in the DangerousPatternVisitor AST (Abstract Syntax Tree) analyzer, which is a tool used to analyze the structure of source code. The analyzer fails to detect dunder attribute traversal techniques, where attackers use special Python attributes—such as class, bases, subclasses (), and globals—to navigate the object hierarchy. This allows unauthorized access to restricted functions and the execution of arbitrary system commands from plugin code.

Recommendations Update to version 1.4.0 or later.