Executive brief
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Affected products
- PyPI virtualenv
Junglewise Threat Intelligence
CVE-2026-22702: PYSEC-2026-2009 - virtualenv Has TOCTOU Vulnerabilities in Directory Creation
CVE-2026-22702 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: virtualenv (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2024-187 - virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not
- PYSEC-2011-23 - virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.