virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensure_dir() for executable, library, and package directories, and ensure_dir() accepts an existing symlink to a directory because exists() follows it. Interpreter creation, seed installation, and activation generation then write through the linked parent outside the requested destination when another local account prepared the tree and the invoking user can access the target. The --clear option removes the planted tree first, while ordinary creation reaches it; arbitrary attacker-selected output bytes are not established. This issue is fixed in version 21.14.9.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin     creator calls ensure_dir() for executable, library, and package directories, and ensure_dir() accepts an     existing symlink to a directory because exists() follows it. Interpreter creation, seed installation, and     activation generation then write through the linked parent outside the requested destination when another     local account prepared the tree and the invoking user can access the target. The --clear option removes     the planted tree first, while ordinary creation reaches it; arbitrary attacker-selected output bytes are     not established. This issue is fixed in version 21.14.9. (CVE-2026-113716)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin
    creator calls ensure_dir() for executable, library, and package directories, and ensure_dir() accepts an
    existing symlink to a directory because exists() follows it. Interpreter creation, seed installation, and
    activation generation then write through the linked parent outside the requested destination when another
    local account prepared the tree and the invoking user can access the target. The --clear option removes
    the planted tree first, while ordinary creation reaches it; arbitrary attacker-selected output bytes are
    not established. This issue is fixed in version 21.14.9. (CVE-2026-113716)

ID	Name	Product	Family	Type	Severity
371011	Linux Distros Unpatched Vulnerability : CVE-2026-113716	Nessus	Misc.	Local	medium
476743	Chainguard: openstack-rally-2026.1: security update to 4.1.0-r5	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
476743	Chainguard: openstack-rally-2026.1: security update to 4.1.0-r5	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
476578	SCA: security update for virtualenv (GHSA-cw65-gx24-rc82)	Tenable Cloud Security	SCA Checks	Local	medium
476578	SCA: security update for virtualenv (GHSA-cw65-gx24-rc82)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-113716

medium

Tenable Plugins

medium

medium

medium

medium

medium