CVE-2026-81690

openssl-encrypt (pip package) versions before 1.4.9 contain a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The vulnerability arises because rglob() in CPython does not descend into symlinked directories, while O_NOFOLLOW on the hash side binds only the final path compone...

CVE-2026-81690 verify-usb before 1.4.9 Symlink Directory Traversal Code Execution

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

PT-2026-82591

Name of the Vulnerable Software and Affected Versions openssl-encrypt versions prior to 1.4.9 Description A symlink-following flaw exists in the verify-usb v2 added-file allowlist scan. The scan uses the rglob function, which in CPython does not descend into symlinked directories and treats the...