CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113725
HIGHCVSS 7.8NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash makes over PS1, so a backslash in the name undoes the escaping and a name containing \$(...) runs as commands in the use
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog