CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113722
HIGHCVSS 7.8NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to distlib ScriptMaker when generating POSIX console scripts. When the path contains a space or produces a shebang longer than
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog