CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.9 are susceptible to a path traversal vulnerability in the PluginSandbox._is_safe_path function, allowing unauthorized file access through a prefix match. This flaw compromises per-plugin isolation, enabling a sandboxed plugin without READ_FILES permission to access files in another plugin's directory if their names share a common prefix. Organizations utilizing OpenSSL for plugin management should prioritize updating to the patched version to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox._is_safe_path, which authorized file access using a bare string-prefix match. A sandboxed plugin without the READ_FILES permission could read or write another plugin's directory that merely shares a name prefix (e.g., .../plugins/foobar matching allowed .../plugins/foo), breaking per-plugin isolation within the same user. Fixed by matching each allowed directory exactly or with a trailing path separator.
Related CVEs
Other vulnerabilities affecting the same vendor(s)