CVE-2026-57825

OCaml / opam PUBLISHED

Description (CNA)

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.

Affected (CNA)

Vendor / product	Versions
OCaml / opam	affected 0 before 2.5.2

CWE

CWE-61

References

https://github.com/ocaml/opam/releases
https://osv.dev/vulnerability/OSEC-2026-10

ADP enrichment

CVE

No English description supplied.

https://lists.debian.org/debian-lts-announce/2026/07/msg00026.html

CISA-ADP

No English description supplied.

No references supplied.