Medium severity5.7NVD Advisory· Published Sep 9, 2026· Updated Sep 9, 2026
CVE-2026-57825
CVE-2026-57825
Description
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versionspkg:rpm/opensuse/opam&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/opam&distro=openSUSE%20Tumbleweed
< 2.5.2-bp160.1.1+ 1 more
- (no CPE)range: < 2.5.2-bp160.1.1
- (no CPE)range: < 2.5.2-1.2
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.