## virtualenv: Builtin creation follows linked environment directories

- 種別: advisory
- 重大度: medium
- 関連技術: python
- CVE: CVE-2026-113716
- 公開日時: 2026-10-21T21:35:56.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-cw65-gx24-rc82)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-cw65-gx24-rc82

影響: pip:virtualenv < 21.14.9 → 21.14.9
The builtin creator accepts existing directory symlinks through ensure_dir() and writes environment files through those directories. This permits writes outside the requested destination. Anthropic's OSS Scanner reported this as ANT-2026-MUFJEG11 in virtualenv-20261015-005, received on 15 October 2026. Affected area Directory preparation before environment files are created. Attacker-controlled input Another account must be able to prepare linked entries below the chosen destination before crea…