CVE-2026-113720

This vulnerability is rated as Moderate severity rather than Low due to the potential for local arbitrary code execution and privilege escalation between non-root users, but it does not warrant an Important rating because exploitation requires specific non-default preconditions. To exploit this flaw, a local attacker must have traverse and write permissions in the target environment directory, and the victim's virtual environment cache must have been previously created under an overly permissive umask. In standard Red Hat product deployments and automated build environments, default system umasks and isolated user workspace directories prevent unauthorized local accounts from modifying newly seeded virtual environment files.