CVE-2026-81701

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9

Description The software uses a denylist to identify trusted built-in plugins, which allows unsigned plugins located in top-level plugins/ directories and unknown subdirectories to bypass signature verification. This flaw enables attackers to place malicious unsigned plugins in documented installation paths to achieve arbitrary code execution within the CLI process, potentially granting access to passwords and cryptographic keys.

Recommendations Update to version 1.4.9 or later.