CVE-2026-74883 is a protection mechanism failure in the jahlives openssl_encrypt plugin affecting versions prior to 1.4.0. The vulnerability arises because the sandbox environment fails to restrict alternative file access methods, specifically through the importation of pathlib or io modules. This allows attackers to circumvent the restricted_open file access controls and perform arbitrary file read and write operations, undermining the sandbox's security guarantees.

Successful exploitation allows an attacker to bypass sandbox restrictions and gain unauthorized read and write access to arbitrary files on the system. This compromises the confidentiality and integrity of data protected by the sandbox, potentially leading to further system compromise or data leakage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting use of the affected plugin versions and monitor vendor communications for updates.