Arbitrary file access via unhooked file APIs

Sandbox bypass in jahlives OpenSSL Encrypt before 1.4.0 allows attackers to read and write files via unrestricted pathlib and io calls. In modules/plugin_system/plugin_sandbox.py, the sandbox replaces builtins.open with restricted_open but leaves pathlib.Path methods and io.open callable and importable, so untrusted plugin code can bypass the file hook entirely. Reachability depends on any deployment path that executes attacker-supplied plugin code; in threading mode the vendor states the bypass is trivial, and in default process isolation mode file restrictions are absent entirely.