CVE-2026-71268: Python Openssl Subprocess Argument Injection

Unsanitized input formatted into OpenSSL subprocess command line arguments can lead to argument injection or path traversal vulnerabilities.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-71268-python-openssl-subprocess-argument-injection --engine opengrep

Description

Unsanitized input formatted into OpenSSL subprocess command line arguments can lead to argument injection or path traversal vulnerabilities.