CVE-2026-74899

creationtimestamp| type| source ---|---|--- 2026-08-17 12:11:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtboc6pfix2e 2026-08-17 12:35:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6sh3u5ltovdjh 2026-08-17 19:20:04+00:00| seen|...

CVE-2026-74899

opensslencrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec builtins. Attackers can traverse the Python class hierarchy via class.mro.subclasses to access system functions and execute arbitrary OS comman...

CVE-2026-74899

openssl_encrypt (versions before 1.4.0) has a sandbox escape in its IsolatedPluginExecutor component. Restricted exec() builtins expose Python type objects, allowing attackers to traverse the class hierarchy via __class__.__mro__.__subclasses__() to reach system functions and run arbitrary OS com...