openssl_encrypt functions before version 1.4.0 contain a sandbox bypass that allows attackers to override the file access restrictions by importing the pathlib and io modules. This flaw lets an attacker read or write any file on the host system, thereby compromising confidentiality, integrity and potentially enabling code execution. The weakness is identified as CWE-693: Improper Restriction of Operations within the Sandbox.

The vulnerability affects the openssl_encrypt library developed by jahlives. Any installations of version 1.3.x or earlier are vulnerable; version 1.4.0 and later contain the fix. No other products or vendors are listed.

The CVSS score of 8.7 indicates high severity. The EPSS score is currently unavailable, and the vulnerability is not listed in the CISA KEV catalog. Attackers must gain the ability to execute arbitrary plugin code within the sandbox, likely by uploading malicious modules or exploiting an existing plugin. Once the sandbox is bypassed through pathlib or io imports, the attacker has unrestricted file read/write capabilities.