High severityNVD Advisory· Published Oct 20, 2026
CVE-2026-113723
CVE-2026-113723
Description
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must influence the value passed to virtualenv, and a user must subsequently activate the environment and draw the prompt. This vulnerability is fixed in 21.14.9.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <21.14.9
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.