A vulnerability classified as critical has been found in sandboxie-plus Sandboxie up to 1.17.2 on Windows. Affected by this issue is some unknown functionality of the component SbieIniServer RunSbieCtrl Handler. The manipulation leads to stack-based buffer overflow.

This vulnerability is documented as CVE-2026-34461. The attack needs to be performed locally. There is not any exploit available.

It is recommended to upgrade the affected component.