CVE-2026-81696: Improper Output Neutralization for Logs in jahlives openssl_encrypt

The vulnerability CVE-2026-81696 affects jahlives openssl_encrypt versions prior to 1.4.9. It arises from a failure to sanitize terminal control characters in file metadata output by the info command. An attacker can exploit this by embedding escape sequences in malicious files, which when logged or displayed, can repaint terminal output and forge verification information, misleading users about the authenticity or integrity of files.

Successful exploitation can lead to forged terminal output and verification information, potentially deceiving users about file authenticity or integrity. This can undermine trust in the software's verification process and may facilitate further attacks or misinformation. The CVSS 4.0 score of 9.3 indicates a critical severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability of the verification information.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when processing files with untrusted metadata and consider restricting or sanitizing inputs manually if possible.