CVE-2026-102280: Sandboxie-Plus: Sandbox containment bypass
Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandbox could send MSGIDFILESETATTRIBUTES or MSGIDFILESETSHORTNAME to SbieSvc and cause the SYSTEM service to open and modify an existing file outside the sandbox. The direct primitive changes file attributes, timestamps, writeability, or 8.3 short names; a short-name redirection can additionally contribute to SYSTEM code execution when a privileged process resolves an attacker-controlled short-name path in a location SbieSvc can open. This vulnerability is fixed in 1.18.6.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Sandboxie-Plusto a version that resolves this vulnerability.Fixed in 1.18.6
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running Sandboxie-Plus versions before 1.18.6 are affected when an attacker can run a process inside a Sandboxie sandbox. Exploitation is local and requires low-privileged access; no user interaction is required.
What can an attacker do with the file-modification primitive?
A sandboxed process can cause the SYSTEM SbieSvc service to modify attributes, timestamps, writeability, or the 8.3 short name of an existing file outside the sandbox. Manipulating a short name can also contribute to SYSTEM code execution if a privileged process later resolves an attacker-controlled short-name path that SbieSvc can open.
What should be done to remediate the issue?
Upgrade Sandboxie-Plus to version 1.18.6, which contains the fix. Until upgrading is possible, reduce exposure by preventing untrusted users or workloads from running processes inside Sandboxie sandboxes.