CVE-2026-74896
Received Received - Intake

OpenSSL Encrypt Sandbox Escape via Dunder Attribute Traversal

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: VulnCheck

Description
openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. Attackers can use __class__, __bases__, __subclasses__(), and __globals__ chains to access restricted functions and execute arbitrary system commands from plugin code.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-74896
EUVD
EUVD-2026-60115

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openssl openssl_encrypt to 1.4.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-693 The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a sandbox escape vulnerability in openssl_encrypt versions before 1.4.0. The DangerousPatternVisitor AST analyzer fails to detect dunder attribute traversal techniques like __class__, __bases__, __subclasses__(), and __globals__ chains. Attackers can use these to bypass sandbox restrictions and execute arbitrary system commands from plugin code.

Detection Guidance

Check openssl_encrypt version with pip show openssl_encrypt or python -c "import openssl_encrypt; print(openssl_encrypt.__version__)". Look for versions before 1.4.0. Monitor for unusual plugin code using dunder attributes like __class__, __bases__, __subclasses__, __globals__ in logs or sandboxed environments.

Impact Analysis

An attacker could craft malicious plugin code to escape the sandbox and execute arbitrary commands on the system. This could lead to full system compromise, data theft, or unauthorized code execution depending on the plugin's privileges.

Compliance Impact

This vulnerability allows arbitrary code execution from plugin code, which could lead to unauthorized data access, modification, or exfiltration. For GDPR, this could violate principles of data protection and user rights. For HIPAA, it may compromise protected health information integrity and confidentiality.

Mitigation Strategies

Upgrade to openssl_encrypt version 1.4.0 or later if available. If no patched version exists, disable plugin code execution or sandboxing features temporarily. Review and restrict plugin code to prevent use of dunder attributes and dynamic code execution methods.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74896. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart