{"id":"CVE-2026-102280","kind":"vulnerability","aliases":["CVE-2026-102280"],"related":[],"title":"Sandboxie-Plus: sandboxed process can modify files outside the sandbox","description":"Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandbox could send MSGID_FILE_SET_ATTRIBUTES or MSGID_FILE_SET_SHORT_NAME to SbieSvc and cause the SYSTEM service to open and modify an existing file outside the sandbox. The direct primitive changes file attributes, timestamps, writeability, or 8.3 short names; a short-name redirection can additionally contribute to SYSTEM code execution when a privileged process resolves an attacker-controlled short-name path in a location SbieSvc can open. This vulnerability is fixed in 1.18.6.","summary":"Sandboxie-Plus before 1.18.6 lets a process inside a sandbox send requests to the SbieSvc SYSTEM service that change attributes, timestamps, writability or 8.3 short names of files outside the sandbox. A short-name redirection can also contribute to code execution as SYSTEM when a privileged process resolves an attacker-controlled short-name path.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","sandboxie-plus","windows"],"not_affected_if":["fixed-version","not-installed"],"how_to_check":"- Check the installed Sandboxie-Plus version in the application's About dialog or its installed program list\n- Look for the `SbieSvc` service on Windows machines running Sandboxie-Plus and note its version","fix":"- Sandboxie-Plus: `1.18.6`","status":"open","published_at":"2026-11-04T22:17:42+00:00","first_seen_at":"2026-11-04T23:08:47+00:00","triaged_at":"2026-11-04T23:09:57+00:00","updated_at":"2026-11-04T23:09:57+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-04T23:09:57Z","model":"claude-haiku-5-5","output":{"fix":"- Sandboxie-Plus: `1.18.6`","reach":"local","title":"Sandboxie-Plus: sandboxed process can modify files outside the sandbox","impact":"medium","summary":"Sandboxie-Plus before 1.18.6 lets a process inside a sandbox send requests to the SbieSvc SYSTEM service that change attributes, timestamps, writability or 8.3 short names of files outside the sandbox. A short-name redirection can also contribute to code execution as SYSTEM when a privileged process resolves an attacker-controlled short-name path.","audience":"businesses","category":"package","nicknames":[],"who_cares":["windows","sandboxie-plus"],"confidence":0.8,"fix_status":"available","needs_auth":"no","worst_case":"sandboxed code changes outside files and may escalate to SYSTEM","analyst_note":"","how_to_check":"- Check the installed Sandboxie-Plus version in the application's About dialog or its installed program list\n- Look for the `SbieSvc` service on Windows machines running Sandboxie-Plus and note its version","plain_action":"","needs_analyst":false,"not_affected_if":["not-installed","fixed-version"],"who_is_affected":"Windows machines where Sandboxie-Plus is installed and used to run untrusted programs inside a sandbox, since the flaw lets sandboxed code reach the SYSTEM service. Machines without Sandboxie-Plus installed are not exposed to this issue.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000714,"input_tokens":4392,"output_tokens":549,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-102280':14A,17A '-2026':13A,16A '1.18.6':27B,97C,180C '8.3':47B,141C 'addit':150C 'also':61B 'attack':75B,163C 'attacker-control':74B,162C 'attribut':43B,108C,137C 'base':90C 'caus':118C 'chang':42B,135C 'code':64B,154C 'contribut':62B,151C 'control':76B,164C 'could':103C 'cve':12A,15A 'direct':133C 'execut':65B,155C 'exist':127C 'file':8A,51B,106C,111C,128C,136C 'fix':178C 'insid':31B,100C 'isol':91C 'let':28B 'locat':171C 'modifi':7A,125C 'msgid':105C,110C 'name':49B,58B,79B,114C,143C,147C,167C 'open':86C,123C,174C 'outsid':9A,52B,129C 'packag':18B 'path':80B,168C 'plus':3A,21B,25B,83C 'primit':134C 'prior':95C 'privileg':70B,158C 'process':5A,30B,71B,99C,159C 'redirect':59B,148C 'request':35B 'resolv':72B,160C 'sandbox':4A,11A,33B,54B,89C,102C,131C 'sandbox-bas':88C 'sandboxi':2A,20B,24B,82C 'sandboxie-plus':1A,19B,23B,81C 'sbiesvc':38B,116C,172C 'send':34B,104C 'servic':40B,121C 'set':107C,112C 'short':48B,57B,78B,113C,142C,146C,166C 'short-nam':56B,77B,145C,165C 'softwar':92C 'sourc':87C 'system':39B,67B,120C,153C 'timestamp':44B,138C 'vulner':176C 'window':22B,94C 'writabl':45B 'writeabl':139C","nicknames":[],"mitigations":[],"who_affected":"Windows machines where Sandboxie-Plus is installed and used to run untrusted programs inside a sandbox, since the flaw lets sandboxed code reach the SYSTEM service. Machines without Sandboxie-Plus installed are not exposed to this issue.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","package","sandboxieplus","windows"],"campaign_type":null,"first_public_at":"2026-10-10T15:58:17+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-102280","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102280","severity":null,"published_at":"2026-11-04T22:17:42+00:00","modified_at":"2026-11-04T22:17:42+00:00","first_seen_at":"2026-11-04T23:08:47+00:00","fetched_at":"2026-11-04T23:08:47+00:00","note":null}],"documents":[{"id":71111,"url":"https://github.com/sandboxie-plus/Sandboxie/commit/4e121cc4dacdc31973adcb81581b0414d48c26fc","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":71112,"url":"https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.18.6","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":71113,"url":"https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-vhjw-4xvf-c74w","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-10-10T15:58:17+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"}],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}