Multiple security vulnerabilities have been identified in virtualenv, affecting environment creation, launcher generation, and cleanup handling in affected releases. The flaws can allow command execution or out-of-bounds writes when a user creates or clears an environment at a destination influenced by untrusted input. The overall risk is high because local attackers can prepare malicious paths or directory entries that are later processed by the tool.
CVE-2026-113722 (CVSS 7.8 — High): Generated POSIX console launchers can interpret a destination path as shell syntax when the interpreter path requires a shell wrapper. An attacker who can influence the environment destination can cause command execution with the invoking user's privileges when a generated launcher is later run.[/subscribe_to_unlock_form]
Multiple security vulnerabilities have been identified in virtualenv, affecting environment creation, launcher generation, and cleanup handling in affected releases. The flaws can allow command execution or out-of-bounds writes when a user creates or clears an environment at a destination influenced by untrusted input. The overall risk is high because local attackers can prepare malicious paths or directory entries that are later processed by the tool.
CVE-2026-113722 (CVSS 7.8 — High): Generated POSIX console launchers can interpret a destination path as shell syntax when the interpreter path requires a shell wrapper. An attacker who can influence the environment destination can cause command execution with the invoking user's privileges when a generated launcher is later run.[emaillocker id="1283"]
CVE-2026-113724 (CVSS 4.5 — Medium): The deletion error handler can read permission bits from a symbolic link but apply them to the link target, changing the target's mode after an eligible deletion failure. A local attacker who can arrange a failed deletion on a symbolic link may widen permissions on a user-owned target outside the intended destination.
CVE-2026-113716 (CVSS 4.5 — Medium): The builtin environment creator accepts existing directory symlinks and writes environment files through them, allowing writes outside the requested destination. A local attacker who can prepare linked directory entries in an existing destination can cause environment files to be written to another location accessible to the invoking user.
These vulnerabilities collectively present a significant local risk for users who create or clear environments from destinations that may be influenced by other accounts. The most exposed users are those who accept untrusted project directories, shared paths, or prepared environment trees before running the tool. The appropriate response is to assume that such inputs can be malicious.
We recommend you to update virtualenv to version 21.14.9.
The following reports contain further technical details:
[/emaillocker]