CVE-2026-115586 | pypa virtualenv up to 21.14.12 Activation Script bin/activate prompt code injection

October 23, 2026 Yanac

A vulnerability was found in pypa virtualenv up to 21.14.12. It has been rated as problematic. Impacted is an unknown function of the file bin/activate of the component Activation Script. This manipulation of the argument prompt causes code injection.

This vulnerability appears as CVE-2026-115586. The attack requires local access. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More