CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.0 are vulnerable to a critical sandbox escape flaw in the IsolatedPluginExecutor, allowing attackers to exploit Python type objects in restricted exec() builtins. This vulnerability enables unauthorized access to the Python class hierarchy, potentially leading to the execution of arbitrary OS commands. Organizations using affected versions of OpenSSL should prioritize immediate remediation to mitigate the risk of system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Python class hierarchy via __class__.__mro__.__subclasses__() to access system functions and execute arbitrary OS commands.
Related CVEs
Other vulnerabilities affecting the same vendor(s)