CVE-2026-113715— virtualenv: Venv configuration readback can reinterpret path boundaries
Quick assessment
Affected
pypa virtualenv
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
virtualenv 是一个用于创建隔离的虚拟 Python 环境的工具。在 21.14.9 版本之前，标准库（stdlib）中的 venv 创建器会使用 读取生成的 文件，并将解析出的键合并到 virtualenv 所选的配置中。如果不可信的调用者能够影响目标路径名，他们可以在配置文件中插入行边界字符（例如 U+2028），从而注入 和 等键。这会导致路径数据在最终输出前改变配置结构。将 设置为 会削弱环境隔离性；而篡改 路径则可能改变解释器加载的标准库文件，前提是攻击者还能控制该位置。内置的创建器不会使用这种回
Possible ATT&CK Techniques 2 AI
T1055.001 · Dynamic-link Library Injection T1548.001 · Setuid and SetgidAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| pypa | virtualenv | < 21.14.9 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-113715
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
virtualenv: Venv configuration readback can reinterpret path boundaries
Source: CVE Program / CVE List V5
Vulnerability Description
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines() and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include a line-boundary character such as U+2028 to inject keys including home and include-system-site-packages, causing path data to change configuration structure before final output. Setting include-system-site-packages to true weakens environment isolation, while an altered home can change which standard-library files the interpreter loads if the attacker also controls that location. The builtin creator does not use this readback path. This issue is fixed in version 21.14.9.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对CRLF序列的转义处理不恰当(CRLF注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| pypa | virtualenv | < 21.14.9 | - |
|
II. Public POCs for CVE-2026-113715
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-113715
请登录查看更多情报信息。
Other References for CVE-2026-113715 (4)
-
https://github.com/pypa/virtualenv/pull/3426 x_refsource_MISC
-
https://github.com/pypa/virtualenv/releases/tag/21.14.9 x_refsource_MISC
-
https://github.com/pypa/virtualenv/security/advisories/GHSA-qmx5-4p3x-wvqf x_refsource_CONFIRM
Same Patch Batch · pypa · 2026-10-20 · 16 CVEs total
| CVE-2026-113722 | 7.8 HIGH | virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax |
| CVE-2026-113725 | 7.8 HIGH | virtualenv bash activate runs commands from an environment name with a backslash before $ |
| CVE-2026-113726 | 7.8 HIGH | virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST |
| CVE-2026-113776 | 7.8 HIGH | virtualenv activation scripts run code from a path that contains a placeholder name |
| CVE-2026-113732 | 7.8 HIGH | virtualenv activate.fish runs commands from a path or prompt with a backslash before a quo |
| CVE-2026-113718 | 7.1 HIGH | virtualenv: Xonsh activation literals depend on the script decoding codec |
| CVE-2026-113723 | 7.1 HIGH | virtualenv: Bash prompt values can change meaning under older compatibility modes |
| CVE-2026-113716 | 4.5 MEDIUM | virtualenv: Builtin creation follows linked environment directories |
| CVE-2026-113719 | 4.5 MEDIUM | virtualenv: Seed replacement does not contain metadata deletion paths |
| CVE-2026-113724 | 4.5 MEDIUM | virtualenv: Deletion recovery can change a symlink target's mode |
| CVE-2026-113721 | 4.5 MEDIUM | virtualenv: Generated files can follow existing destination links |
| CVE-2026-113713 | 4.4 MEDIUM | virtualenv: Temporary app-data can leave dangling seed package links |
| CVE-2026-113720 | 4.4 MEDIUM | virtualenv: Seeded files retain permissions from an older cache |
| CVE-2026-113714 | 2.3 LOW | virtualenv: Downloaded wheel selection and caching precede verification |
| CVE-2026-113717 | 2.3 LOW | virtualenv: Pip seeding with download omits wheel digest verification |
IV. Related Vulnerabilities
Same product: virtualenv
-
CVE-2026-113726
virtualenv activate runs commands from the environment name -
CVE-2026-113776
virtualenv activation scripts run code from a path that cont -
CVE-2026-113732
virtualenv activate.fish runs commands from a path or prompt -
CVE-2026-113725
virtualenv bash activate runs commands from an environment n -
CVE-2026-113724
virtualenv: Deletion recovery can change a symlink target's
Same vendor: pypa
-
CVE-2026-113726
virtualenv activate runs commands from the environment name -
CVE-2026-113776
virtualenv activation scripts run code from a path that cont -
CVE-2026-113732
virtualenv activate.fish runs commands from a path or prompt -
CVE-2026-113725
virtualenv bash activate runs commands from an environment n -
CVE-2026-113724
virtualenv: Deletion recovery can change a symlink target's
Same weakness: CWE-93
-
CVE-2026-113403
ArmorX Global Technology｜ArmorX Spam - Command Injection -
CVE-2026-113386
Roundcube 1.6.20/1.7.5 之前版本存在 IMAP 命令注入漏洞 -
CVE-2026-111228
Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via se -
CVE-2026-111227
Netgate pfSense CE through 2.9.0 CRLF Injection via services -
CVE-2026-111222
Netgate pfSense CE through 2.9.0 php.ini Injection via Timez
V. Comments for CVE-2026-113715
No comments yet