CVE-2026-81716

Analyzed Analyzed - Analysis Complete

Path Traversal in openssl-encrypt Plugin

Publication date: 2026-08-27

Last updated on: 2026-09-02

Assigner: VulnCheck

Description

openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox._is_safe_path, which authorized file access using a bare string-prefix match. A sandboxed plugin without the READ_FILES permission could read or write another plugin's directory that merely shares a name prefix (e.g., .../plugins/foobar matching allowed .../plugins/foo), breaking per-plugin isolation within the same user. Fixed by matching each allowed directory exactly or with a trailing path separator.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-09-02

Generated

2026-09-17

AI Q&A

2026-08-27

EPSS Evaluated

2026-09-15

NVD

CVE-2026-81716

EUVD

EUVD-2026-67066

Affected Vendors & Products

Vendor	Product	Version / Range
jahlives	openssl_encrypt	to 1.4.9 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal flaw in the openssl_encrypt plugin versions before 1.4.9. It occurs in the PluginSandbox._is_safe_path function where file access is authorized using a bare string-prefix match. This allows a sandboxed plugin without READ_FILES permission to read or write files in another plugin's directory if their paths share a common prefix, breaking per-plugin isolation.

Detection Guidance

Check the version of openssl_encrypt installed on your system. If it is below 1.4.9, the system is vulnerable. Use commands like 'pip show openssl-encrypt' or 'pip list' to inspect installed versions.

Impact Analysis

If you use the affected openssl_encrypt plugin versions, a malicious plugin could access or modify files in other plugins' directories that share a name prefix. This could lead to unauthorized data exposure, data corruption, or privilege escalation within the same user context.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating compliance requirements such as GDPR (data protection) or HIPAA (health information privacy). Breaches of per-plugin isolation may result in unauthorized data exposure or modification, triggering regulatory penalties or legal consequences.

Mitigation Strategies

Upgrade openssl_encrypt to version 1.4.9 or later immediately. Remove or disable any vulnerable plugins and ensure sandboxed plugins have only the necessary permissions.

Hi! I’m here to help you understand CVE-2026-81716. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70