medium5.7
CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.
Impact
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.
Affected products
| Product | Affected versions |
|---|---|
| Opam Package | before 2.5.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.