PoC Index83,594 CVEs with PoCs

CVE-2026-113720

virtualenv: Seeded files retain permissions from an older cache

MEDIUM 4.4EPSS 0.1%

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy() to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can therefore produce files writable by another local account in a later traversable environment, allowing package code such as pip/__init__.py to be modified and executed by the environment owner. The attacker cannot force the earlier umask, and a private destination parent prevents access. This issue is fixed in version 21.14.9.

Affected
pypa · virtualenv
CVSS v4.0 GITHUB
4.4 MEDIUMCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v4.0 GitHub
4.4 MEDIUMCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.13% chance of exploitation in the next 30 days, 3rd percentile
Published
2026-10-20
Updated
2026-10-21

Proof-of-concept exploits (1)

CVE references

References