CVE-2026-102925 | pypa virtualenv up to 21.7.12 Activation Scripts activate.fish os command injection

September 29, 2026 Yanac

A vulnerability was found in pypa virtualenv up to 21.7.12. It has been declared as problematic. This vulnerability affects unknown code of the file activate.fish of the component Activation Scripts. Such manipulation leads to os command injection.

This vulnerability is listed as CVE-2026-102925. The attack must be carried out locally. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More