CVE-2026-34596 | sandboxie-plus Sandboxie up to 1.17.2 on Windows SandMan Interface UpdUtil.exe toctou

A vulnerability described as critical has been identified in sandboxie-plus Sandboxie up to 1.17.2 on Windows. Affected by this vulnerability is an unknown functionality of the file UpdUtil.exe of the component SandMan Interface. Executing a manipulation can lead to time-of-check time-of-use.

This vulnerability is registered as CVE-2026-34596. The attack needs to be launched locally. No exploit is available.

Upgrading the affected component is recommended.