CVE-2026-81716: openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversal
opensslencrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox.issafepath, which authorized file access using a bare string-prefix match. A sandboxed plugin without the READFILES permission could read or write another plugin's directory that merely shares a name prefix (e.g., .../plugins/foobar matching allowed .../plugins/foo), breaking per-plugin isolation within the same user. Fixed by matching each allowed directory exactly or with a trailing path separator.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openssl_encrypt (pip: openssl-encrypt)to a version that resolves this vulnerability.Fixed in 1.4.9 - Configuration
Update the plugin sandbox path validation logic so allowed directories are matched exactly or only when the candidate path starts with the allowed directory followed by a trailing path separator (avoid bare string-prefix matching).
PluginSandbox._is_safe_path Allowed directory matching = Exact directory match or prefix match only with trailing path separator
Event History
Frequently Asked Questions
Who is exposed to this issue?
Installations running versions before 1.4.9 are exposed when sandboxed plugins run under the same user and plugin directories have overlapping name prefixes, such as foo and foobar.
What does an attacker need to exploit it?
An attacker needs control of a sandboxed plugin. The plugin does not need the READ_FILES permission if it can target another plugin directory whose path shares a bare prefix with an allowed directory.
What is the impact within an affected deployment?
A malicious plugin may read or write files in another plugin's directory despite per-plugin sandbox isolation. The issue does not describe access outside the same user's plugin directories.
What can be done before upgrading?
Avoid plugin directory names where one name is a prefix of another, and do not run untrusted sandboxed plugins alongside plugins whose files must remain isolated. Upgrade to version 1.4.9 or later when possible.