GHSA-8RJX-V5WW-45PP virtualenv activation scripts run code from a path that contains a placeholder name

Impact ViaTemplateActivator.instantiatetemplate replaces the placeholders in an activation template one key at a time, each across the whole text. When a value that it already substituted and quoted contains the name of a later placeholder, the later pass rewrites that name inside the quoted...

EUVD-2026-106868

virtualenv activation scripts run code from a path that contains a placeholder name...

virtualenv activation scripts run code from a path that contains a placeholder name

Impact ViaTemplateActivator.instantiatetemplate replaces the placeholders in an activation template one key at a time, each across the whole text. When a value that it already substituted and quoted contains the name of a later placeholder, the later pass rewrites that name inside the quoted...

CVE-2026-113776

A flaw was found in virtualenv. An attacker who can influence an environment's path or prompt setting can achieve arbitrary command execution when a user activates the virtual environment. This issue occurs because activation templates process substitution placeholders sequentially, allowing...

CVE-2026-113726

A flaw was found in virtualenv. When an environment activation script is sourced in the Z shell zsh, prompt values such as the environment name are not properly escaped. An attacker who convinces a user to activate a virtual environment with a maliciously crafted directory name or prompt...

CVE-2026-113732

A flaw was found in virtualenv. The Fish shell activation script generator improperly sanitizes and quotes environment paths and prompt values. If an attacker can influence these values, specially crafted input can break out of the script's quoting syntax. Consequently, this flaw allows arbitrary...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via instantiatetemplate in src/virtualenv/activation/viatemplate.py, which replaces placeholders one at a time across the entire activation script template. When a path component such as a parent directory is named...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via FishActivator, which inherits shlex.quote for escaping shell arguments. The POSIX quoting rules applied by shlex.quote leave backslash characters literal inside single quotes, but the fish shell treats ' as an...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the activate.sh bash activation script, which zsh also sources, when a virtualenv is created with a name containing shell metacharacters such as $.... Because zsh with PROMPTSUBST re-expands PS1 on every prompt dra...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the seed mechanism's console script launcher rewriting logic in pipinvoke.py on POSIX systems. When a virtual environment is created and pip installs packages with console scripts, the interpreter path embedded in...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via ViaTemplateActivator.generate and PyEnvCfg.write, which write generated activation scripts and pyvenv.cfg without first atomically replacing any existing symbolic or hard link at the destination path...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the uninstalldist method in src/virtualenv/seed/embed/viaappdata/pipinstall/base.py, which fails to validate that paths listed in a distribution's RECORD or toplevel.txt metadata files are contained within the...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via insufficient escaping of the VIRTUALENVPROMPT variable in src/virtualenv/activation/bash/activate.sh. When a virtual environment is activated in bash or zsh, the prompt string is interpolated into PS1 without fully...

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the validatedest path in src/virtualenv/create/viaglobalref/venv.py when using the --creator venv backend, where a virtual environment destination path containing line boundary characters is written unescaped into...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the quote method in src/virtualenv/activation/xonsh/init.py, which uses repr to encode string literals written into the xonsh activation script. Because repr does not guarantee ASCII-safe output, non-ASCII...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via insufficient escaping of the virtual environment name in the bash activate script src/virtualenv/activation/bash/activate.sh. Bash processes PS1 in two passes each time it draws the prompt: it first decodes backsla...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the onerror handler in src/virtualenv/util/path/sync.py during directory tree removal on Windows. When a read-only file or directory cannot be deleted, the handler widens the entry's permissions using os.chmod before...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource in the copy and copytree functions within src/virtualenv/util/path/sync.py, files copied into a new virtual environment are created via shutil.copy, which does not use exclusive...

DEBIAN-CVE-2026-113776

virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiatetemplate replaces placeholders one key at a time across the complete activation template, so trigger names such as VIRTUALNAME, VIRTUALENV, or VIRTUALPROMPT inside a...

DEBIAN-CVE-2026-113732

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote, which uses POSIX shlex.quote even though fish interprets backslashes and single quotes differently. An attacker-influenced environment path, --prompt, or...