PT-2026-37227 · Unknown · Sandboxie Plus

Yanchon918S · Published 2026-05-05 · Updated 2026-05-07 · CVE-2026-34461

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sandboxie-Plus versions prior to 1.17.3

Description The SbieIniServer RunSbieCtrl handler contains a stack buffer overflow. The MSGID SBIE INI RUN SBIE CTRL message is processed before standard sandbox and impersonation checks. For callers not in a sandbox, the handler uses memcpy() to copy the trailing message payload into a fixed-size ctrlCmd[128] stack buffer without verifying if the length fits. Because the service pipe is created with a NULL DACL (Discretionary Access Control List), which is a security descriptor that allows any user access, any local interactive process can connect and send an oversized payload to overflow the stack. This may result in a crash of the SbieSvc service or potential code execution with SYSTEM privileges.

Recommendations Update to version 1.17.3.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-34461

Affected Products

Sandboxie Plus

References · 6

• 🔥 https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-wpjw-jh2p-gwx7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-34461 · Security Note
• https://twitter.com/VulmonFeeds/status/2051800518117183635 · Twitter Post
• https://t.me/cveNotify/162518 · Telegram Post
• https://twitter.com/CVEnew/status/2051758510434562446 · Twitter Post
• https://twitter.com/infoflowcloud/status/2051760423783813617 · Twitter Post