CVE-2026-113720

A flaw was found in virtualenv. When creating new environments, cached package files retain their original permissions rather than respecting the current user file-creation mask umask. On shared systems where an environment directory is accessible to other users, a local attacker can modify these...