virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate() removes an existing output only when Path.exists() is true, allowing a dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write() opens pyvenv.cfg without first replacing an existing symbolic or hard link. Another local account that prepares final entries inside the destination can therefore cause environment creation to create or overwrite files outside the requested tree with constrained virtualenv-generated content and the invoking user's permissions. The destination parent must remain controlled by the environment owner during creation; concurrent parent-directory replacement is a separate concern. This issue is fixed in version 21.14.9.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9,
    ViaTemplateActivator._generate() removes an existing output only when Path.exists() is true, allowing a
    dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write() opens
    pyvenv.cfg without first replacing an existing symbolic or hard link. Another local account that prepares
    final entries inside the destination can therefore cause environment creation to create or overwrite files
    outside the requested tree with constrained virtualenv-generated content and the invoking user's
    permissions. The destination parent must remain controlled by the environment owner during creation;
    concurrent parent-directory replacement is a separate concern. This issue is fixed in version 21.14.9.
    (CVE-2026-113721)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9,     ViaTemplateActivator._generate() removes an existing output only when Path.exists() is true, allowing a     dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write() opens     pyvenv.cfg without first replacing an existing symbolic or hard link. Another local account that prepares     final entries inside the destination can therefore cause environment creation to create or overwrite files     outside the requested tree with constrained virtualenv-generated content and the invoking user's     permissions. The destination parent must remain controlled by the environment owner during creation;
    concurrent parent-directory replacement is a separate concern. This issue is fixed in version 21.14.9.
    (CVE-2026-113721)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
477507	Chainguard: nemo-skills: security update to 0.7.0_git20260911-r6	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
477507	Chainguard: nemo-skills: security update to 0.7.0_git20260911-r6	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
371038	Linux Distros Unpatched Vulnerability : CVE-2026-113721	Nessus	Misc.	Local	medium
476816	SCA: security update for virtualenv (GHSA-558c-9hv2-4prj)	Tenable Cloud Security	SCA Checks	Local	medium
476816	SCA: security update for virtualenv (GHSA-558c-9hv2-4prj)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-113721

medium

Tenable Plugins

medium

medium

medium

medium

medium