The flaw resides in PluginSandbox._is_safe_path, which incorrectly allows a sandboxed plugin to read or write files in another plugin’s directory when the directory names share a common prefix. A plugin without the READ_FILES permission can therefore expose or alter data belonging to other plugins, breaking the intended isolation and potentially leaking or corrupting sensitive information within the same user account.

All releases of the openssl_encrypt package (PyPI name openssl-encrypt, GitHub project jahlives/openssl_encrypt) prior to version 1.4.9 are affected. The vulnerability is specific to the PluginSandbox logic in that library; no separate vendor products beyond the library itself are listed.

The CVSS score is 8.7, indicating a high severity. EPSS data are unavailable, and the vulnerability is not currently in CISA’s KEV catalog, so no documented exploits are known. Nonetheless, the flaw can be exploited by any user who can add or run a plugin via the library, making the likely attack vector local through plugin installation or execution. The exploit requires only a simple manipulation of the target path string to reference a prefixed directory.