CVE-2026-81690
Description
A flaw was found in the verify-usb component of the openssl-encrypt Python package. An attacker with physical access to a removable drive could exploit a symlink-following vulnerability during the added-file allowlist scan. By replacing a legitimate directory with a symlink to a modified copy containing a malicious compiled Python file, the scan would incorrectly report the drive as safe. This could lead to arbitrary code execution when a victim runs the portable installation from the compromised drive.
Statement
Red Hat does not ship the openssl-encrypt Python package affected by this vulnerability. This vulnerability affects the verify-usb component of the openssl-encrypt pip package, which is a third-party encryption utility. Red Hat products do not include or distribute this Python package. Red Hat ships the OpenSSL cryptographic library and Python cryptography bindings such as pyOpenSSL and cryptography, but these are separate packages and are not affected by vulnerabilities in the third-party openssl-encrypt utility.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Access Control
Technical Impact: Read Files or Directories; Modify Files or Directories; Bypass Protection Mechanism
An attacker may be able to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. If the files are used for a security mechanism then an attacker may be able to bypass the mechanism.
Other
Technical Impact: Execute Unauthorized Code or Commands
Windows simple shortcuts, sometimes referred to as soft links, can be exploited remotely since a ".LNK" file can be uploaded like a normal file. This can enable remote execution.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
