virtualenv is a tool that creates isolated Python environments. Prior to version 21.14.9, the text supplied by the caller for the Bash prompt can be interpreted as executable syntax when the environment is activated. This means that if an attacker can influence the prompt value, they may cause arbitrary shell commands to run during activation, leading to command‑execution risk.

Affected products are the pypa virtualenv package itself. All releases older than 21.14.9 are vulnerable; the fix is deployed in version 21.14.9 and later.

The CVSS score of 7.1 classifies the issue as high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The required conditions are that the attacker be able to supply a crafted prompt to virtualenv and that a user activates that environment. Therefore the attack vector is local or requires social engineering; remote exploitation is not demonstrated.