CVE-2026-128079 | tensorchord envd up to 1.3.5 Python Package Installation install.python_packages requirements path traversal

November 13, 2026 Yanac

A vulnerability classified as problematic was found in tensorchord envd up to 1.3.5. This impacts the function install.python_packages of the component Python Package Installation. Executing a manipulation of the argument requirements can lead to path traversal.

This vulnerability appears as CVE-2026-128079. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More