CVE-2026-81701

critical · 9.3

openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths to achieve arbitrary code execution in the CLI process with access to passwords and cryptographic keys.

9.3

CVSS

0.4%

EPSS (exploit prob.)

37th

EPSS percentile

2026-08-27

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-347

Affected products

Vendor	Product	Affected versions
jahlives	openssl_encrypt	< 1.4.9

Check a specific version with /api/v1/cve/match.

References

https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-wxx9-p55f-wm34
https://www.vulncheck.com/advisories/openssl-encrypt-before-1.4.9-arbitrary-code-execution-via-unsigned-plugin

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-81701