CVEvulnerability

CVE-2026-57825

5.7 MEDIUM Published 2026-09-09 Modified 2026-09-14 Official page ↗

Status: Deferred
Published: 2026-09-09
Last modified: 2026-09-14
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.7 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
Weaknesses: CWE-61

Description

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.

Weakness · CWE (1)

CWE-61 UNIX Symbolic Link (Symlink) Following weakness

References

https://github.com/ocaml/opam/releases github.com
https://osv.dev/vulnerability/OSEC-2026-10 osv.dev
https://lists.debian.org/debian-lts-announce/2026/07/msg00026.html lists.debian.org

CVE-2026-57825

Description

Related

Weakness · CWE (1)

References