CVE-2026-74895

PYSEC-2026-3770 · CVE-2026-74895 · GHSA-623h-chj7-hfx8

Published Aug 17, 2026 · Modified Sep 2, 2026

AI SAST

Find this class of vulnerability in your own code

Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.

Explore AI SAST Explore dependency scanning →

Description

openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted access to the filesystem, network, subprocess execution, and all Python modules.

References

ADVISORY https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-623h-chj7-hfx8
ADVISORY https://www.vulncheck.com/advisories/openssl-encrypt-before-plugin-sandbox-bypass-via-process-isolation

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes

CVE-2026-74895

Description

References

More PyPI vulnerabilities

Start Securing