CVE-2026-81716

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9

Description A path traversal flaw exists in the PluginSandbox. is safe path() function. The issue occurs because file access is authorized using a bare string-prefix match. This allows a sandboxed plugin lacking the READ FILES permission to read or write directories of other plugins that share a similar name prefix, which compromises the isolation between plugins for the same user.

Recommendations Update to version 1.4.9 or later.