CVE-2026-113722

A flaw was found in virtualenv. Due to improper quoting of interpreter paths when generating script wrappers, an attacker who influences the environment destination path can achieve arbitrary code execution. When a user subsequently executes a generated script launcher, embedded shell commands ar...