UBUNTU-CVE-2026-22702

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...

5gasp-cli (>=0.1.0, <=0.4.0), ablator (0.0.1b3) +271 more potentially affected by CVE-2026-22702 via virtualenv (>=20.0.9, <=20.35.4)

virtualenv PYPI version =20.0.9, =0.1.0, =0.1.0, =1.0.9, =0.0.1, =0.0.2, =0.1.0, =0.2.0, =0.6.1.91, =1.5.0, =2024.7.4, =0.8.3b20231012, =1.0.1b20240404 and more Source cves: CVE-2026-22702 Source advisory: SNYK:PYTHON-VIRTUALENV-14912451...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via a race condition in the directory creation process. An attacker can gain unauthorized access to sensitive data or modify files by exploiting a time gap between directory existence checks and their creation, redirectin...

CVE-2026-22702

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...

5gasp-cli (>=0.1.0, <=0.4.0), ablator (0.0.1b3) +306 more potentially affected by CVE-2026-22702 via virtualenv (>=1.11.6, <=20.35.4)

virtualenv PYPI version =1.11.6, =0.1.0, =0.1.0, =1.0.9, =2.0.1, =0.0.1, =0.0.2, =0.1.0, =0.2.0, =0.6.1.91, =1.5.0, =2024.7.4, =2024.7.4.1 - autocleus 0.1.1 and more Source cves: CVE-2026-22702 Source advisory: MEND:CVE-2026-22702...

CVE-2026-22702

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...

CVE-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...

CVE-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...

CVE-2026-22702

CVE-2026-22702 concerns the Python tool for creating isolated environments, virtualenv. The issue is a TOCTOU race in directory creation where a local attacker can exploit a window between existence checks and creation to redirect virtualenv’s app_data and lock files to attacker-controlled locati...

CVE-2026-22702: Improper Link Resolution Before File Access

virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...

virtualenv -- CWE-59: Improper Link Resolution Before File Access ('Link Following')

https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986 reports: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attac...

Virtualenv race condition vulnerability

Virtualenv is an open source Python virtual environment builder from Python Packaging Authority. A competing conditional issue vulnerability exists in versions prior to virtualenv 20.36.1, which stems from a TOCTOU vulnerability in the directory creation operation that could lead to a symbolic...

Linux Distros Unpatched Vulnerability : CVE-2026-22702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv...

PT-2026-2252

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 20.36.1 Description virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, Time-of-Check-Time-of-Use TOCTOU vulnerabilities exist in virtualenv that allow local attackers ...

GHSA-W853-JP5J-5J7F filelock has a TOCTOU race condition which allows symlink attacks during lock file creation

Impact A Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation where filelock checks if a file exists before opening it with OTRUNC. An attack...

filelock has a TOCTOU race condition which allows symlink attacks during lock file creation

Impact A Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation where filelock checks if a file exists before opening it with OTRUNC. An attack...

CVE-2025-50181 affecting package python-virtualenv for versions less than 20.26.6-2

CVE-2025-50181 affecting package python-virtualenv for versions less than 20.26.6-2. A patched version of the package is available...

EUVD-2020-3441

Malware in sbrugna...

EUVD-2011-0025

Malware in sbrugna...

AZL-77823 CVE-2025-50181 affecting package python-virtualenv for versions less than 20.36.1-2

urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attemptin...