CVE-2026-113776

A flaw was found in virtualenv. An attacker who can influence an environment's path or prompt setting can achieve arbitrary command execution when a user activates the virtual environment. This issue occurs because activation templates process substitution placeholders sequentially, allowing...